diff options
author | sbd <sbd@pkgsrc.org> | 2012-08-20 08:19:36 +0000 |
---|---|---|
committer | sbd <sbd@pkgsrc.org> | 2012-08-20 08:19:36 +0000 |
commit | 449940b97865c18a52836f01ec7e11c2176d05e1 (patch) | |
tree | 9214954fc7718c523260b27e5bcdd6c8e03d72d8 /devel/ruby-activesupport31/distinfo | |
parent | e14b70ae3eaf3696667cf04eb4403a0b5d93ed84 (diff) | |
download | pkgsrc-449940b97865c18a52836f01ec7e11c2176d05e1.tar.gz |
Pullup ticket #3902 - requested by taca
Ruby on Rails 3.1.8 security update
Revisions pulled up:
- databases/ruby-activerecord31/distinfo 1.6
- devel/ruby-activemodel31/distinfo 1.6
- devel/ruby-activesupport31/distinfo 1.7
- devel/ruby-railties31/distinfo 1.6
- lang/ruby/rails.mk 1.29
- mail/ruby-actionmailer31/distinfo 1.6
- www/ruby-actionpack31/distinfo 1.7
- www/ruby-activeresource31/distinfo 1.6
- www/ruby-rails31/distinfo 1.6
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Aug 12 10:32:52 UTC 2012
Modified Files:
pkgsrc/lang/ruby: rails.mk
Log Message:
Start Ruby on Rails 3.1.8.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Aug 12 10:33:18 UTC 2012
Modified Files:
pkgsrc/devel/ruby-activesupport31: distinfo
Log Message:
Update ruby-activesupport31 to 3.1.8.
## Rails 3.1.8 (Aug 9, 2012)
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Aug 12 10:33:48 UTC 2012
Modified Files:
pkgsrc/devel/ruby-activemodel31: distinfo
Log Message:
Update ruby-activemodel31 to 3.1.8.
## Rails 3.1.8 (Aug 9, 2012)
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Aug 12 10:34:38 UTC 2012
Modified Files:
pkgsrc/www/ruby-actionpack31: distinfo
Log Message:
Update ruby-actionpack31 to 3.1.8.
## Rails 3.1.8 (Aug 9, 2012)
* There is an XSS vulnerability in the strip_tags helper in Ruby on Rails, the
helper doesn't correctly handle malformed html. As a result an attacker can
execute arbitrary javascript through the use of specially crafted malformed
html.
*Marek from Nethemba (www.nethemba.com) & Santiago Pastorino*
* When a "prompt" value is supplied to the `select_tag` helper, the
"prompt" value is not escaped.
If untrusted data is not escaped, and is supplied as the prompt value,
there is a potential for XSS attacks.
Vulnerable code will look something like this:
select_tag("name", options, :prompt => UNTRUSTED_INPUT)
*Santiago Pastorino*
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Aug 12 10:35:20 UTC 2012
Modified Files:
pkgsrc/databases/ruby-activerecord31: distinfo
Log Message:
Update ruby-activerecord31 to 3.1.8.
## Rails 3.1.8 (Aug 9, 2012)
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Aug 12 10:36:35 UTC 2012
Modified Files:
pkgsrc/www/ruby-activeresource31: distinfo
Log Message:
Update ruby-activeresource31 to 3.1.8.
## Rails 3.1.8 (Aug 9, 2012)
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Aug 12 10:37:22 UTC 2012
Modified Files:
pkgsrc/mail/ruby-actionmailer31: distinfo
Log Message:
Update ruby-actionmailer31 to 3.1.8.
## Rails 3.1.8 (Aug 9, 2012)
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Aug 12 10:37:52 UTC 2012
Modified Files:
pkgsrc/devel/ruby-railties31: distinfo
Log Message:
Update ruby-railties31 to 3.1.8.
## Rails 3.1.8 (Aug 9, 2012)
* No changes.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Aug 12 10:38:45 UTC 2012
Modified Files:
pkgsrc/www/ruby-rails31: distinfo
Log Message:
Update ruby-rails31 to 3.1.8.
This is a meta-like package and no changes.
Diffstat (limited to 'devel/ruby-activesupport31/distinfo')
-rw-r--r-- | devel/ruby-activesupport31/distinfo | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/devel/ruby-activesupport31/distinfo b/devel/ruby-activesupport31/distinfo index 83fe5b06bc0..0de774b6e66 100644 --- a/devel/ruby-activesupport31/distinfo +++ b/devel/ruby-activesupport31/distinfo @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.5.2.1 2012/08/12 14:26:14 tron Exp $ +$NetBSD: distinfo,v 1.5.2.2 2012/08/20 08:19:36 sbd Exp $ -SHA1 (activesupport-3.1.7.gem) = b3577252695f2ffb3b001d67f99f81e292dc31ee -RMD160 (activesupport-3.1.7.gem) = 0e904360e1e472c201830c80dab8fa6f655161db -Size (activesupport-3.1.7.gem) = 307712 bytes +SHA1 (activesupport-3.1.8.gem) = d884ed4cb183108531a5e78d93f8d24bf265640a +RMD160 (activesupport-3.1.8.gem) = 41e635c73061048748c28ce531fddad701ddc0f6 +Size (activesupport-3.1.8.gem) = 307712 bytes |