All Versions
23
Latest Version
Avg Release Cycle
77 days
Latest Release
1061 days ago

Changelog History
Page 2

  • v0.13.14 Changes

    January 25, 2018

    🛠 Fixes:

    • 🛠 Fix memory leak caused by Rack::Session::Pool

    🔄 Changes:

    • 0️⃣ Rack::Session::Pool and Rack::Protection are not enabled as default now.

    0️⃣ Please note that Rack::Protection is not enabled as default now. To protect your geminabox from XSS and CSRF vulnerability, you have to embed Rack::Protection by yourself in your config.ru file as:

    require "geminabox"

Geminabox.data = "/var/geminabox-data" # ... or wherever

  • v0.13.13 Changes

    January 11, 2018

    🛠 Fixes:

    • ⚡️ Update link to issue shown at an error message (thanks to Tobias L. Maier)
    • Hide delete button if delete disabled in gem view (thanks to Tobias L. Maier)

  • v0.13.12 Changes

    January 11, 2018

    yanked

  • v0.13.11 Changes

    November 17, 2017

    🛠 Fixes:

    • 🛠 Fix _cache file is not closed

  • v0.13.10 Changes

    November 13, 2017

    🛠 Fix vulnerabilities:

    • 🛠 Fix stored XSS vulnerabilities - CVE-2017-16792 (reported by Yasin Soliman)

  • v0.13.9 Changes

    September 25, 2017

    ✨ Enhancements:

    • 🔧 Make it be configurable HTTPClient options of Geminabox.http_adapter

  • v0.13.8 Changes

    September 24, 2017

    🛠 Fixes:

    • gem inabox command should unescape username/password of geminabox url
    • gem inabox command should get gemname from gemspec rather than directory name
    • Concurrent reindex(:force_rebuild) should be serialized

  • v0.13.7 Changes

    September 23, 2017

    🛠 Fix vulnerabilities:

    • 🛠 Fix CSRF vulnerabilities - CVE-2017-14683 (reported by Barak Tawily)

  • v0.13.6 Changes

    September 19, 2017

    🛠 Fix vulnerabilities:

    • 🛠 Fix XSS vulnerabilities - CVE-2017-14506 (reported by Barak Tawily)

  • v0.13.5 Changes

    January 14, 2017

    🛠 Fixes:

    • 🚚 disk_cache.rb: ignore Errno::ENOENT, and EOFError. There is a possibility that the file is removed by another process after checking File.exist?.