-
Notifications
You must be signed in to change notification settings - Fork 106
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Pullup ticket #2941 - requested by minskim
databases/ruby-activerecord: security update devel/ruby-activesupport: security update mail/ruby-actionmailer: security update www/rails: security update www/ruby-actionpack: security update www/ruby-activeresource security update Revisions pulled up: - databases/ruby-activerecord/Makefile 1.17 - databases/ruby-activerecord/distinfo 1.17 - devel/ruby-activesupport/Makefile 1.20 - devel/ruby-activesupport/PLIST 1.16 - devel/ruby-activesupport/distinfo 1.17 - mail/ruby-actionmailer/Makefile 1.16 - mail/ruby-actionmailer/distinfo 1.17 - www/rails/Makefile 1.17 - www/rails/distinfo 1.13 - www/ruby-actionpack/Makefile 1.18 - www/ruby-actionpack/PLIST 1.18 - www/ruby-actionpack/distinfo 1.19 - www/ruby-activeresource/Makefile 1.7 - www/ruby-activeresource/distinfo 1.7 --- Module Name: pkgsrc Committed By: minskim Date: Tue Dec 1 23:24:24 UTC 2009 Modified Files: pkgsrc/databases/ruby-activerecord: Makefile distinfo pkgsrc/devel/ruby-activesupport: Makefile PLIST distinfo pkgsrc/mail/ruby-actionmailer: Makefile distinfo pkgsrc/www/rails: Makefile distinfo pkgsrc/www/ruby-actionpack: Makefile PLIST distinfo pkgsrc/www/ruby-activeresource: Makefile distinfo Log Message: Update rails packages to 2.3.5. This fixes a cross-site scripting vulnerability in ruby-actionpack. Major changes: - Improved compatibility with Ruby 1.9 - RailsXss plugin availability - Fixes for the Nokogiri backend for XmlMini
- Loading branch information
tron
committed
Dec 2, 2009
1 parent
bd68895
commit 76f074d
Showing
17 changed files
with
87 additions
and
50 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,14 +1,14 @@ | ||
# $NetBSD: Makefile,v 1.16 2009/09/12 22:14:16 minskim Exp $ | ||
# $NetBSD: Makefile,v 1.16.2.1 2009/12/02 23:17:09 tron Exp $ | ||
|
||
DISTNAME= activerecord-2.3.4 | ||
DISTNAME= activerecord-2.3.5 | ||
PKGNAME= ${RUBY_PKGPREFIX}-${DISTNAME} | ||
CATEGORIES= databases | ||
|
||
MAINTAINER= minskim@NetBSD.org | ||
HOMEPAGE= http://rubyforge.org/projects/activerecord/ | ||
COMMENT= Object-relation mapping put on rails | ||
|
||
DEPENDS+= ${RUBY_PKGPREFIX}-activesupport>=2.3.2:../../devel/ruby-activesupport | ||
DEPENDS+= ${RUBY_PKGPREFIX}-activesupport>=2.3.5:../../devel/ruby-activesupport | ||
|
||
.include "../../misc/rubygems/rubygem.mk" | ||
.include "../../mk/bsd.pkg.mk" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,5 +1,5 @@ | ||
$NetBSD: distinfo,v 1.16 2009/09/12 22:14:16 minskim Exp $ | ||
$NetBSD: distinfo,v 1.16.2.1 2009/12/02 23:17:09 tron Exp $ | ||
|
||
SHA1 (activerecord-2.3.4.gem) = 4961cb0b993347127cfdd6df80e9c4bacb4f6ebc | ||
RMD160 (activerecord-2.3.4.gem) = 950ceacf5bbe54e898769a06b9952452d5cbd0b6 | ||
Size (activerecord-2.3.4.gem) = 542720 bytes | ||
SHA1 (activerecord-2.3.5.gem) = f411a1ad8aeef78a464b00663eecdc22e0e4266c | ||
RMD160 (activerecord-2.3.5.gem) = be3bee034c5d56128a7a6c10470b92fdb167e569 | ||
Size (activerecord-2.3.5.gem) = 546304 bytes |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,5 +1,5 @@ | ||
$NetBSD: distinfo,v 1.16 2009/09/12 22:14:16 minskim Exp $ | ||
$NetBSD: distinfo,v 1.16.2.1 2009/12/02 23:17:09 tron Exp $ | ||
|
||
SHA1 (activesupport-2.3.4.gem) = ed1cda9c03e8565d1c0ad32704fcd37fac4d3faf | ||
RMD160 (activesupport-2.3.4.gem) = c724f47a4f27e5abe5372859154465073ea6a3ee | ||
Size (activesupport-2.3.4.gem) = 409600 bytes | ||
SHA1 (activesupport-2.3.5.gem) = fb2673b4d093f1586cc1c8fbbaa7e822b185e6d1 | ||
RMD160 (activesupport-2.3.5.gem) = 1b1da0c5cd19fd1390d18b8878bd716bf5d371a8 | ||
Size (activesupport-2.3.5.gem) = 410624 bytes |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,5 +1,6 @@ | ||
$NetBSD: distinfo,v 1.2 2006/10/14 12:11:56 adrianp Exp $ | ||
$NetBSD: distinfo,v 1.2.28.1 2009/12/02 23:17:10 tron Exp $ | ||
|
||
SHA1 (pear/Mail-1.1.14.tgz) = 6c46636e0df3c0a813df3cbda1fd5afac987069d | ||
RMD160 (pear/Mail-1.1.14.tgz) = 72c0c7018b92ef97789f723a1970c41471bd165f | ||
Size (pear/Mail-1.1.14.tgz) = 17537 bytes | ||
SHA1 (patch-aa) = ef6b0afa4e45789bb82065413c7b1305f92daf72 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,25 @@ | ||
$NetBSD: patch-aa,v 1.1.2.2 2009/12/02 23:17:10 tron Exp $ | ||
|
||
Fix for http://secunia.com/advisories/37410/: | ||
refering Debian's patch via http://secunia.com/advisories/37458/ | ||
|
||
--- Mail/sendmail.php.orig 2006-09-26 21:44:11.000000000 +0900 | ||
+++ Mail/sendmail.php | ||
@@ -108,7 +108,7 @@ class Mail_sendmail extends Mail { | ||
if (PEAR::isError($recipients)) { | ||
return $recipients; | ||
} | ||
- $recipients = escapeShellCmd(implode(' ', $recipients)); | ||
+ $recipients = implode(' ', array_map('escapeshellarg', $recipients)); | ||
|
||
$this->_sanitizeHeaders($headers); | ||
$headerElements = $this->prepareHeaders($headers); | ||
@@ -126,7 +126,7 @@ class Mail_sendmail extends Mail { | ||
return PEAR::raiseError('From address specified with dangerous characters.'); | ||
} | ||
|
||
- $from = escapeShellCmd($from); | ||
+ $from = escapeShellArg($from); | ||
$mail = @popen($this->sendmail_path . (!empty($this->sendmail_args) ? ' ' . $this->sendmail_args : '') . " -f$from -- $recipients", 'w'); | ||
if (!$mail) { | ||
return PEAR::raiseError('Failed to open sendmail [' . $this->sendmail_path . '] for execution.'); |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,14 +1,14 @@ | ||
# $NetBSD: Makefile,v 1.15 2009/09/12 22:20:29 minskim Exp $ | ||
# $NetBSD: Makefile,v 1.15.2.1 2009/12/02 23:17:10 tron Exp $ | ||
|
||
DISTNAME= actionmailer-2.3.4 | ||
DISTNAME= actionmailer-2.3.5 | ||
PKGNAME= ${RUBY_PKGPREFIX}-${DISTNAME} | ||
CATEGORIES= mail | ||
|
||
MAINTAINER= minskim@NetBSD.org | ||
HOMEPAGE= http://rubyforge.org/projects/actionmailer/ | ||
COMMENT= Ruby framework for designing email-service layers | ||
|
||
DEPENDS+= ${RUBY_PKGPREFIX}-actionpack>=2.3.2:../../www/ruby-actionpack | ||
DEPENDS+= ${RUBY_PKGPREFIX}-actionpack>=2.3.5:../../www/ruby-actionpack | ||
|
||
.include "../../misc/rubygems/rubygem.mk" | ||
.include "../../mk/bsd.pkg.mk" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,5 +1,5 @@ | ||
$NetBSD: distinfo,v 1.16 2009/09/12 22:20:29 minskim Exp $ | ||
$NetBSD: distinfo,v 1.16.2.1 2009/12/02 23:17:10 tron Exp $ | ||
|
||
SHA1 (actionmailer-2.3.4.gem) = 38bdedd3293df6c798c02b165b7d17e4a7e9a37a | ||
RMD160 (actionmailer-2.3.4.gem) = e99bce8d4e613f03e449756deb960ceeaa453a34 | ||
Size (actionmailer-2.3.4.gem) = 110592 bytes | ||
SHA1 (actionmailer-2.3.5.gem) = fc0302d56425b0133cdc67c9ccddd03a53260ee6 | ||
RMD160 (actionmailer-2.3.5.gem) = cca42177ba90b0e04d5cd2acece93268183b2ec2 | ||
Size (actionmailer-2.3.5.gem) = 111104 bytes |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,5 +1,5 @@ | ||
$NetBSD: distinfo,v 1.12 2009/09/12 22:14:17 minskim Exp $ | ||
$NetBSD: distinfo,v 1.12.2.1 2009/12/02 23:17:10 tron Exp $ | ||
|
||
SHA1 (rails-2.3.4.gem) = cd7d3e0407fd70db70c1a751fe7796e2f231f017 | ||
RMD160 (rails-2.3.4.gem) = e2b808f2d01ab5b9a9d8a90ca4871f69332e85dd | ||
Size (rails-2.3.4.gem) = 1258496 bytes | ||
SHA1 (rails-2.3.5.gem) = e341aba6d1be9ec89ffe924a960e2c56c073954c | ||
RMD160 (rails-2.3.5.gem) = 6807ad6bbf04949e0f866ce05da0b321600572ea | ||
Size (rails-2.3.5.gem) = 1258496 bytes |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,14 +1,14 @@ | ||
# $NetBSD: Makefile,v 1.17 2009/09/12 22:14:17 minskim Exp $ | ||
# $NetBSD: Makefile,v 1.17.2.1 2009/12/02 23:17:10 tron Exp $ | ||
|
||
DISTNAME= actionpack-2.3.4 | ||
DISTNAME= actionpack-2.3.5 | ||
PKGNAME= ${RUBY_PKGPREFIX}-${DISTNAME} | ||
CATEGORIES= www | ||
|
||
MAINTAINER= minskim@NetBSD.org | ||
HOMEPAGE= http://rubyforge.org/projects/actionpack/ | ||
COMMENT= Two-step approach to web response generation | ||
|
||
DEPENDS+= ${RUBY_PKGPREFIX}-activesupport>=2.3.2:../../devel/ruby-activesupport | ||
DEPENDS+= ${RUBY_PKGPREFIX}-activesupport>=2.3.5:../../devel/ruby-activesupport | ||
|
||
.include "../../misc/rubygems/rubygem.mk" | ||
.include "../../mk/bsd.pkg.mk" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,6 +1,6 @@ | ||
$NetBSD: distinfo,v 1.18 2009/09/12 22:14:17 minskim Exp $ | ||
$NetBSD: distinfo,v 1.18.2.1 2009/12/02 23:17:10 tron Exp $ | ||
|
||
SHA1 (actionpack-2.3.4.gem) = a468b2feb3a15813b0a8d10968ad2c2c09e6eac0 | ||
RMD160 (actionpack-2.3.4.gem) = 83626e6af9f7d0992c2582295e5a0bf8b0522d8c | ||
Size (actionpack-2.3.4.gem) = 733184 bytes | ||
SHA1 (actionpack-2.3.5.gem) = 6c46dbcbde1840202ebd2bcfa690d53047e47c9e | ||
RMD160 (actionpack-2.3.5.gem) = b9b9f1451ecdf050ca9a376e6fde020e7aebdb61 | ||
Size (actionpack-2.3.5.gem) = 737792 bytes | ||
SHA1 (patch-ab) = bfba841b0af9d503a71745cc8d992e9d09d94191 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,14 +1,14 @@ | ||
# $NetBSD: Makefile,v 1.6 2009/09/12 22:14:17 minskim Exp $ | ||
# $NetBSD: Makefile,v 1.6.2.1 2009/12/02 23:17:10 tron Exp $ | ||
|
||
DISTNAME= activeresource-2.3.4 | ||
DISTNAME= activeresource-2.3.5 | ||
PKGNAME= ${RUBY_PKGPREFIX}-${DISTNAME} | ||
CATEGORIES= www | ||
|
||
MAINTAINER= minskim@NetBSD.org | ||
HOMEPAGE= http://rubyforge.org/projects/activeresource/ | ||
COMMENT= Object-relational mapping for REST webservices | ||
|
||
DEPENDS+= ${RUBY_PKGPREFIX}-activesupport>=2.3.2:../../devel/ruby-activesupport | ||
DEPENDS+= ${RUBY_PKGPREFIX}-activesupport>=2.3.5:../../devel/ruby-activesupport | ||
|
||
.include "../../misc/rubygems/rubygem.mk" | ||
.include "../../mk/bsd.pkg.mk" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,5 +1,5 @@ | ||
$NetBSD: distinfo,v 1.6 2009/09/12 22:14:17 minskim Exp $ | ||
$NetBSD: distinfo,v 1.6.2.1 2009/12/02 23:17:10 tron Exp $ | ||
|
||
SHA1 (activeresource-2.3.4.gem) = 214db73f7bfc62cfe5234c3cbf30e4fec6ef16d5 | ||
RMD160 (activeresource-2.3.4.gem) = 730ce680f78450b1f175faf5b2184ebae420d019 | ||
Size (activeresource-2.3.4.gem) = 51712 bytes | ||
SHA1 (activeresource-2.3.5.gem) = 2b4bb421e0857f73d8e9aa2bdd164d6c11bebc00 | ||
RMD160 (activeresource-2.3.5.gem) = cd09fdf2b0d79547af49aa91f21dacebe1cd800f | ||
Size (activeresource-2.3.5.gem) = 64000 bytes |