Subject: CVS commit: pkgsrc/devel/ruby-activemodel
From: Takahiro Kambe
Date: 2013-01-29 16:38:40
Message id: 20130129153840.56ADE175DD@cvs.netbsd.org

Log Message:
Update ruby-activemodel to 3.0.20.

Fix CVE-2013-0333.

There is a vulnerability in the JSON  code for Ruby on Rails which
allows attackers to bypass authentication systems, inject arbitrary
SQL, inject and execute arbitrary code, or perform a DoS attack on a
Rails application.

## Rails 3.0.20 (unreleased)

* Fix XML serialization of methods that return nil to not be
  considered as YAML (GH #8853 and GH #492)

Files:
RevisionActionfile
1.18modifypkgsrc/devel/ruby-activemodel/distinfo