All Versions
Latest Version
Avg Release Cycle
77 days
Latest Release
1117 days ago

Changelog History
Page 2

  • v0.13.14 Changes

    January 25, 2018

    ๐Ÿ›  Fixes:

    • ๐Ÿ›  Fix memory leak caused by Rack::Session::Pool

    ๐Ÿ”„ Changes:

    • 0๏ธโƒฃ Rack::Session::Pool and Rack::Protection are not enabled as default now.

    0๏ธโƒฃ Please note that Rack::Protection is not enabled as default now. To protect your geminabox from XSS and CSRF vulnerability, you have to embed Rack::Protection by yourself in your file as:

    require "geminabox" = "/var/geminabox-data" # ... or wherever
  • v0.13.13 Changes

    January 11, 2018

    ๐Ÿ›  Fixes:

    • โšก๏ธ Update link to issue shown at an error message (thanks to Tobias L. Maier)
    • Hide delete button if delete disabled in gem view (thanks to Tobias L. Maier)
  • v0.13.12 Changes

    January 11, 2018


  • v0.13.11 Changes

    November 17, 2017

    ๐Ÿ›  Fixes:

    • ๐Ÿ›  Fix _cache file is not closed
  • v0.13.10 Changes

    November 13, 2017

    ๐Ÿ›  Fix vulnerabilities:

    • ๐Ÿ›  Fix stored XSS vulnerabilities - CVE-2017-16792 (reported by Yasin Soliman)
  • v0.13.9 Changes

    September 25, 2017

    โœจ Enhancements:

    • ๐Ÿ”ง Make it be configurable HTTPClient options of Geminabox.http_adapter
  • v0.13.8 Changes

    September 24, 2017

    ๐Ÿ›  Fixes:

    • gem inabox command should unescape username/password of geminabox url
    • gem inabox command should get gemname from gemspec rather than directory name
    • Concurrent reindex(:force_rebuild) should be serialized
  • v0.13.7 Changes

    September 23, 2017

    ๐Ÿ›  Fix vulnerabilities:

    • ๐Ÿ›  Fix CSRF vulnerabilities - CVE-2017-14683 (reported by Barak Tawily)
  • v0.13.6 Changes

    September 19, 2017

    ๐Ÿ›  Fix vulnerabilities:

    • ๐Ÿ›  Fix XSS vulnerabilities - CVE-2017-14506 (reported by Barak Tawily)
  • v0.13.5 Changes

    January 14, 2017

    ๐Ÿ›  Fixes:

    • ๐Ÿšš disk_cache.rb: ignore Errno::ENOENT, and EOFError. There is a possibility that the file is removed by another process after checking File.exist?.