pkgsrc.se | The NetBSD package collection

./mail/ruby-actionmailer3, Email composition, delivery and receiving (for Rails 3.0)

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2012Q2, Version: 3.0.17, Package name: ruby193-actionmailer-3.0.17, Maintainer: pkgsrc-users

Action Mailer is a framework for designing email-service layers. These layers
are used to consolidate code for sending out forgotten passwords, welcome
wishes on signup, invoices for billing, and any other use case that requires
a written notification to either a person or another system.

Action Mailer is in essence a wrapper around Action Controller and the
Mail gem. It provides a way to make emails using templates in the same
way that Action Controller renders views using templates.

Additionally, an Action Mailer class can be used to process incoming email,
such as allowing a weblog to accept new posts from an email (which could even
have been sent from a phone).

Required to run:
[mail/ruby-mail22] [lang/ruby193-base] [www/ruby-actionpack3]

Master sites:

SHA1: 80509028b8ab3b7e2f234e1b9d71413d32c2c08c
RMD160: de2714c7e29d92f3a0b1a6ef794da3655fef20b0
Filesize: 30.5 KB

Version history: (Expand)

(2012-08-20) Updated to version: ruby193-actionmailer-3.0.17
(2012-08-13) Updated to version: ruby193-actionmailer-3.0.16
(2012-07-05) Package added to pkgsrc.se, version ruby193-actionmailer-3.0.14 (created)

CVS history: (Expand)

2012-08-20 09:54:05 by Steven Drake | Files touched by this commit (9) | Package updated

Log message:
Pullup ticket #3903 - requested by taca
Ruby on Rails 3.0.17 security update.

Revisions pulled up:
- databases/ruby-activerecord3/distinfo                         1.15
- devel/ruby-activemodel/distinfo                               1.15
- devel/ruby-activesupport3/distinfo                            1.16
- devel/ruby-railties/distinfo                                  1.15
- lang/ruby/rails.mk                                            1.28
- mail/ruby-actionmailer3/distinfo                              1.17
- www/ruby-actionpack3/distinfo                                 1.16
- www/ruby-activeresource3/distinfo                             1.15
- www/ruby-rails3/distinfo                                      1.16

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 09:44:22 UTC 2012

   Modified Files:
   	pkgsrc/lang/ruby: rails.mk

   Log message:
   Start update of Ruby on Rails 3.0.17.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 09:44:58 UTC 2012

   Modified Files:
   	pkgsrc/devel/ruby-activesupport3: distinfo

   Log message:
   Update ruby-activesupport3 to 3.0.17.

   ## Rails 3.0.17 (Aug 9, 2012)

   * No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 09:45:45 UTC 2012

   Modified Files:
   	pkgsrc/devel/ruby-activemodel: distinfo

   Log message:
   Update ruby-activemodel to 3.0.17.

   ## Rails 3.0.17 (Aug 9, 2012)

   * No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 09:46:45 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-actionpack3: distinfo

   Log message:
   Update ruby-actionpack3 to 3.0.17

   ## Rails 3.0.17 (Aug 9, 2012)

   * There is an XSS vulnerability in the strip_tags helper in Ruby on Rails, the
     helper doesn't correctly handle malformed html.  As a result an attacker can
     execute arbitrary javascript through the use of specially crafted malformed
     html.

     *Marek from Nethemba (www.nethemba.com) & Santiago Pastorino*

   * When a "prompt" value is supplied to the `select_tag` helper, the \ 
"prompt"
     value is not escaped.  If untrusted data is not escaped, and is supplied as
     the prompt value, there is a potential for XSS attacks.
     Vulnerable code will look something like this:
       select_tag("name", options, :prompt => UNTRUSTED_INPUT)

     *Santiago Pastorino*

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 09:47:45 UTC 2012

   Modified Files:
   	pkgsrc/databases/ruby-activerecord3: distinfo

   Log message:
   Update ruby-activerecord3 to 3.0.17.

   ## Rails 3.0.17 (Aug 9, 2012)

   * Fix type_to_sql with text and limit on mysql/mysql2 (GH #7252)

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 09:48:26 UTC 2012

   Modified Files:
   	pkgsrc/mail/ruby-actionmailer3: distinfo

   Log message:
   Update ruby-actionmailer3 to 3.0.17.

   ## Rails 3.0.17 (Aug 9, 2012)

   * No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 09:49:01 UTC 2012

   Modified Files:
   	pkgsrc/devel/ruby-railties: distinfo

   Log message:
   Update ruby-railties to 3.0.17.

   ## Rails 3.0.17 (Aug 9, 2012)

   * No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 09:50:41 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-rails3: distinfo

   Log message:
   Update ruby-rails3 to 3.0.17.

   This is a meta-like package and no changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Aug 15 15:58:23 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-activeresource3: distinfo

   Log message:
   Oops, missed from commit for ruby-activeresource3.

2012-08-12 16:06:58 by Matthias Scheler | Files touched by this commit (10) | Package updated

Log message:
Pullup ticket #3894 - requested by taca
databases/ruby-activerecord3: security update
devel/ruby-activemodel: security update
devel/ruby-activesupport3: security update
devel/ruby-railties: security update
mail/ruby-actionmailer3: security update
mail/ruby-mail22/Makefile
www/ruby-actionpack3: security update
www/ruby-activeresource3: security update
www/ruby-rails3: security update

Revisions pulled up:
- databases/ruby-activerecord3/distinfo                         1.14
- devel/ruby-activemodel/distinfo                               1.14
- devel/ruby-activesupport3/distinfo                            1.15
- devel/ruby-railties/distinfo                                  1.14
- lang/ruby/rails.mk                                            1.25
- mail/ruby-actionmailer3/distinfo                              1.16
- mail/ruby-mail22/Makefile                                     1.5
- www/ruby-actionpack3/distinfo                                 1.15
- www/ruby-activeresource3/distinfo                             1.14
- www/ruby-rails3/distinfo                                      1.15

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:20:08 UTC 2012

   Modified Files:
   	pkgsrc/lang/ruby: rails.mk

   Log message:
   Start update of Ruby on Rails to 3.0.16.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:21:03 UTC 2012

   Modified Files:
   	pkgsrc/devel/ruby-activesupport3: distinfo

   Log message:
   Update ruby-activesupport3 to 3.0.16.

   ## Rails 3.0.16 (Jul 26, 2012)

   *   No changes.

   ## Rails 3.0.14 (Jun 12, 2012)

   *   No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:21:54 UTC 2012

   Modified Files:
   	pkgsrc/devel/ruby-activemodel: distinfo

   Log message:
   Update ruby-activemodel to 3.0.16.

   ## Rails 3.0.16 (Jul 26, 2012)

   *   No changes.

   ## Rails 3.0.14 (Jun 12, 2012)

   *   No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:22:56 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-activeresource3: distinfo

   Log message:
   Update ruby-activeresource3 to 3.0.16.

   ## Rails 3.0.16 (Jul 26, 2012)

   *   No changes.

   ## Rails 3.0.14 (Jun 12, 2012)

   *   No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:24:29 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-actionpack3: distinfo

   Log message:
   Update ruby-actionpack3 to 3.0.16.

   ## Rails 3.0.16 (Jul 26, 2012)

   * Do not convert digest auth strings to symbols. CVE-2012-3424

   ## Rails 3.0.14 (Jun 12, 2012)

   *   nil is removed from array parameter values

       CVE-2012-2694

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:25:14 UTC 2012

   Modified Files:
   	pkgsrc/databases/ruby-activerecord3: distinfo

   Log message:
   Update ruby-activerecord3 to 3.0.16.

   ## Rails 3.0.16 (Jul 26, 2012)

   *   No changes.

   ## Rails 3.0.14 (Jun 12, 2012)

   *   protect against the nesting of hashes changing the
       table context in the next call to build_from_hash. This fix
       covers this case as well.

       CVE-2012-2695

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:25:49 UTC 2012

   Modified Files:
   	pkgsrc/mail/ruby-actionmailer3: distinfo

   Log message:
   Update ruby-actionmailer3 to 3.0.16.

   ## Rails 3.0.16 (Jul 26, 2012)

   *   No changes.

   ## Rails 3.0.14 (Jun 12, 2012)

   *   No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:26:47 UTC 2012

   Modified Files:
   	pkgsrc/devel/ruby-railties: distinfo

   Log message:
   Update ruby-railties to 3.0.16.

   ## Rails 3.0.16 (Jul 26, 2012)

   *   No changes.

   ## Rails 3.0.14 (Jun 12, 2012)

   *   No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:27:36 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-rails3: distinfo

   Log message:
   Update ruby-rails3 to 3.0.16.

   This is a meta-like package and no changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 13:02:49 UTC 2012

   Modified Files:
   	pkgsrc/mail/ruby-mail22: Makefile

   Log message:
   Bump PKGREVISION to reflect dependency to devel/ruby-activesupport3.