pkgsrc.se | The NetBSD package collection

./www/ruby-actionpack3, Toolkit for building modeling frameworks (part of Rails 3.0)

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2012Q2, Version: 3.0.17, Package name: ruby193-actionpack-3.0.17, Maintainer: pkgsrc-users

Action Pack is a framework for handling and responding to web requests. It
provides mechanisms for *routing* (mapping request URLs to actions), defining
*controllers* that implement actions, and generating responses by rendering
*views*, which are templates of various formats. In short, Action Pack
provides the view and controller layers in the MVC paradigm.

Required to run:
[devel/ruby-activemodel] [devel/ruby-i18n_05] [lang/ruby193-base] [textproc/ruby-builder] [www/ruby-erubis26] [www/ruby-rack-mount06] [www/ruby-rack12] [www/ruby-rack-test05] [time/ruby-tzinfo]

Master sites:

SHA1: d376046160772c1ef74804ed24173c998482b7b7
RMD160: 498c240a97f86c3f6f4a7d336a5d16952d513aba
Filesize: 347.5 KB

Version history: (Expand)

(2012-08-20) Updated to version: ruby193-actionpack-3.0.17
(2012-08-13) Updated to version: ruby193-actionpack-3.0.16
(2012-07-05) Package added to pkgsrc.se, version ruby193-actionpack-3.0.14 (created)

CVS history: (Expand)

2012-08-20 09:54:05 by Steven Drake | Files touched by this commit (9) | Package updated

Log message:
Pullup ticket #3903 - requested by taca
Ruby on Rails 3.0.17 security update.

Revisions pulled up:
- databases/ruby-activerecord3/distinfo                         1.15
- devel/ruby-activemodel/distinfo                               1.15
- devel/ruby-activesupport3/distinfo                            1.16
- devel/ruby-railties/distinfo                                  1.15
- lang/ruby/rails.mk                                            1.28
- mail/ruby-actionmailer3/distinfo                              1.17
- www/ruby-actionpack3/distinfo                                 1.16
- www/ruby-activeresource3/distinfo                             1.15
- www/ruby-rails3/distinfo                                      1.16

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 09:44:22 UTC 2012

   Modified Files:
   	pkgsrc/lang/ruby: rails.mk

   Log message:
   Start update of Ruby on Rails 3.0.17.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 09:44:58 UTC 2012

   Modified Files:
   	pkgsrc/devel/ruby-activesupport3: distinfo

   Log message:
   Update ruby-activesupport3 to 3.0.17.

   ## Rails 3.0.17 (Aug 9, 2012)

   * No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 09:45:45 UTC 2012

   Modified Files:
   	pkgsrc/devel/ruby-activemodel: distinfo

   Log message:
   Update ruby-activemodel to 3.0.17.

   ## Rails 3.0.17 (Aug 9, 2012)

   * No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 09:46:45 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-actionpack3: distinfo

   Log message:
   Update ruby-actionpack3 to 3.0.17

   ## Rails 3.0.17 (Aug 9, 2012)

   * There is an XSS vulnerability in the strip_tags helper in Ruby on Rails, the
     helper doesn't correctly handle malformed html.  As a result an attacker can
     execute arbitrary javascript through the use of specially crafted malformed
     html.

     *Marek from Nethemba (www.nethemba.com) & Santiago Pastorino*

   * When a "prompt" value is supplied to the `select_tag` helper, the \ 
"prompt"
     value is not escaped.  If untrusted data is not escaped, and is supplied as
     the prompt value, there is a potential for XSS attacks.
     Vulnerable code will look something like this:
       select_tag("name", options, :prompt => UNTRUSTED_INPUT)

     *Santiago Pastorino*

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 09:47:45 UTC 2012

   Modified Files:
   	pkgsrc/databases/ruby-activerecord3: distinfo

   Log message:
   Update ruby-activerecord3 to 3.0.17.

   ## Rails 3.0.17 (Aug 9, 2012)

   * Fix type_to_sql with text and limit on mysql/mysql2 (GH #7252)

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 09:48:26 UTC 2012

   Modified Files:
   	pkgsrc/mail/ruby-actionmailer3: distinfo

   Log message:
   Update ruby-actionmailer3 to 3.0.17.

   ## Rails 3.0.17 (Aug 9, 2012)

   * No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 09:49:01 UTC 2012

   Modified Files:
   	pkgsrc/devel/ruby-railties: distinfo

   Log message:
   Update ruby-railties to 3.0.17.

   ## Rails 3.0.17 (Aug 9, 2012)

   * No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 09:50:41 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-rails3: distinfo

   Log message:
   Update ruby-rails3 to 3.0.17.

   This is a meta-like package and no changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Aug 15 15:58:23 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-activeresource3: distinfo

   Log message:
   Oops, missed from commit for ruby-activeresource3.

2012-08-12 16:06:58 by Matthias Scheler | Files touched by this commit (10) | Package updated

Log message:
Pullup ticket #3894 - requested by taca
databases/ruby-activerecord3: security update
devel/ruby-activemodel: security update
devel/ruby-activesupport3: security update
devel/ruby-railties: security update
mail/ruby-actionmailer3: security update
mail/ruby-mail22/Makefile
www/ruby-actionpack3: security update
www/ruby-activeresource3: security update
www/ruby-rails3: security update

Revisions pulled up:
- databases/ruby-activerecord3/distinfo                         1.14
- devel/ruby-activemodel/distinfo                               1.14
- devel/ruby-activesupport3/distinfo                            1.15
- devel/ruby-railties/distinfo                                  1.14
- lang/ruby/rails.mk                                            1.25
- mail/ruby-actionmailer3/distinfo                              1.16
- mail/ruby-mail22/Makefile                                     1.5
- www/ruby-actionpack3/distinfo                                 1.15
- www/ruby-activeresource3/distinfo                             1.14
- www/ruby-rails3/distinfo                                      1.15

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:20:08 UTC 2012

   Modified Files:
   	pkgsrc/lang/ruby: rails.mk

   Log message:
   Start update of Ruby on Rails to 3.0.16.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:21:03 UTC 2012

   Modified Files:
   	pkgsrc/devel/ruby-activesupport3: distinfo

   Log message:
   Update ruby-activesupport3 to 3.0.16.

   ## Rails 3.0.16 (Jul 26, 2012)

   *   No changes.

   ## Rails 3.0.14 (Jun 12, 2012)

   *   No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:21:54 UTC 2012

   Modified Files:
   	pkgsrc/devel/ruby-activemodel: distinfo

   Log message:
   Update ruby-activemodel to 3.0.16.

   ## Rails 3.0.16 (Jul 26, 2012)

   *   No changes.

   ## Rails 3.0.14 (Jun 12, 2012)

   *   No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:22:56 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-activeresource3: distinfo

   Log message:
   Update ruby-activeresource3 to 3.0.16.

   ## Rails 3.0.16 (Jul 26, 2012)

   *   No changes.

   ## Rails 3.0.14 (Jun 12, 2012)

   *   No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:24:29 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-actionpack3: distinfo

   Log message:
   Update ruby-actionpack3 to 3.0.16.

   ## Rails 3.0.16 (Jul 26, 2012)

   * Do not convert digest auth strings to symbols. CVE-2012-3424

   ## Rails 3.0.14 (Jun 12, 2012)

   *   nil is removed from array parameter values

       CVE-2012-2694

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:25:14 UTC 2012

   Modified Files:
   	pkgsrc/databases/ruby-activerecord3: distinfo

   Log message:
   Update ruby-activerecord3 to 3.0.16.

   ## Rails 3.0.16 (Jul 26, 2012)

   *   No changes.

   ## Rails 3.0.14 (Jun 12, 2012)

   *   protect against the nesting of hashes changing the
       table context in the next call to build_from_hash. This fix
       covers this case as well.

       CVE-2012-2695

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:25:49 UTC 2012

   Modified Files:
   	pkgsrc/mail/ruby-actionmailer3: distinfo

   Log message:
   Update ruby-actionmailer3 to 3.0.16.

   ## Rails 3.0.16 (Jul 26, 2012)

   *   No changes.

   ## Rails 3.0.14 (Jun 12, 2012)

   *   No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:26:47 UTC 2012

   Modified Files:
   	pkgsrc/devel/ruby-railties: distinfo

   Log message:
   Update ruby-railties to 3.0.16.

   ## Rails 3.0.16 (Jul 26, 2012)

   *   No changes.

   ## Rails 3.0.14 (Jun 12, 2012)

   *   No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 12:27:36 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-rails3: distinfo

   Log message:
   Update ruby-rails3 to 3.0.16.

   This is a meta-like package and no changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul 31 13:02:49 UTC 2012

   Modified Files:
   	pkgsrc/mail/ruby-mail22: Makefile

   Log message:
   Bump PKGREVISION to reflect dependency to devel/ruby-activesupport3.