GitLab

feat: excluded shortterm from semester process

See merge request !1223

feat: daily coplaner export

See merge request !1221

feat: add terms of use

See merge request !1219

feat: remove staffomatic address params

See merge request !1217

fix: update staffomatic id translation

See merge request !1215

fix: synchronize only unterminated

See merge request !1214

feat: staffomatic

See merge request !1213

feat: add automatic activation for Ukraine 2022

See merge request !1211

chore: update readme

See merge request !1210

fix: search_volunteer index

See merge request !1208

fix: update translation

See merge request !1207

chore: update cost units and entry source

See merge request !1205

Deploy Fix vulerablilities and copy group offer email addresses to production

See merge request !1204

Name: puma
Version: 5.6.1
CVE: CVE-2022-23634
GHSA: GHSA-rmj8-8hhh-gv5h
Criticality: High
URL: https://github.com/puma/puma/security/advisories/GHSA-rmj8-8hhh-gv5h
Title: Information Exposure with Puma when used with Rails
Solution: upgrade to ~> 4.3.11, >= 5.6.2

Name: image_processing
Version: 1.12.1
CVE: CVE-2022-24720
GHSA: GHSA-cxf7-qrc5-9446
Criticality: Critical
URL: https://github.com/janko/image_processing/security/advisories/GHSA-cxf7-qrc5-9446
Title: Remote shell execution vulnerability when applying commands from user input
Solution: upgrade to >= 1.12.2

Name: actionpack
Version: 6.1.4.4
CVE: CVE-2022-23633
GHSA: GHSA-wh98-p28r-vrc9
Criticality: High
URL: https://groups.google.com/g/ruby-security-ann/c/FkTM-_7zSNA/m/K2RiMJBlBAAJ
Title: Possible exposure of information vulnerability in Action Pack
Solution: upgrade to ~> 5.2.6, >= 5.2.6.2, ~> 6.0.4, >= 6.0.4.6, ~> 6.1.4, >= 6.1.4.6, >= 7.0.2.2

Name: activestorage
Version: 6.1.4.4
CVE: CVE-2022-21831
GHSA: GHSA-w749-p3v6-hccq
Criticality: Unknown
URL: https://groups.google.com/g/rubyonrails-security/c/n-p-W1yxatI
Title: Possible code injection vulnerability in Rails / Active Storage
Solution: upgrade to ~> 5.2.6, >= 5.2.6.3, ~> 6.0.4, >= 6.0.4.7, ~> 6.1.4, >= 6.1.4.7, >= 7.0.2.3

Name: nokogiri
Version: 1.13.1
CVE: CVE-2021-30560
GHSA: GHSA-fq42-c5rg-92c2
Criticality: High
URL: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-fq42-c5rg-92c2
Title: Update packaged libxml2 (2.9.12 → 2.9.13) and libxslt (1.1.34 → 1.1.35)
Solution: upgrade to >= 1.13.2