Hello community, here is the log from the commit of package rubygem-actionmailer-3_2.2388 for openSUSE:12.2:Update checked in at 2013-12-23 14:39:41 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.2:Update/rubygem-actionmailer-3_2.2388 (Old) and /work/SRC/openSUSE:12.2:Update/.rubygem-actionmailer-3_2.2388.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "rubygem-actionmailer-3_2.2388" Changes: -------- New Changes file: --- /dev/null 2013-11-25 01:44:08.036031256 +0100 +++ /work/SRC/openSUSE:12.2:Update/.rubygem-actionmailer-3_2.2388.new/rubygem-actionmailer-3_2.changes 2013-12-23 14:39:43.000000000 +0100 @@ -0,0 +1,48 @@ +------------------------------------------------------------------- +Thu Dec 12 17:28:43 UTC 2013 - jmassaguer...@suse.com + +- fix CVE-2013-4389: rubygem-actionmailer-3_1: possible DoS + vulnerability in the log subscriber component (bnc#846239) + File CVE-2013-4389.patch contains the fix. + +------------------------------------------------------------------- +Wed Feb 13 23:01:56 UTC 2013 - mrueck...@suse.de + +- update to version 3.2.12 (bnc#803336) CVE-2013-0276: + * Version bump + +------------------------------------------------------------------- +Thu Jan 17 11:15:07 UTC 2013 - mrueck...@suse.de + +- update to 3.2.11: (bnc#796712, bnc#797449, bnc#797452) + - If super fails return a nullmail class + +------------------------------------------------------------------- +Thu Aug 2 15:08:57 UTC 2012 - mrueck...@suse.de + +- update to 3.2.7 + - just version bumps to stay in sync + +------------------------------------------------------------------- +Wed Apr 4 17:24:44 UTC 2012 - co...@suse.com + +- update to 3.2.3, + * Upgrade mail version to 2.4.3 + +------------------------------------------------------------------- +Fri Mar 23 11:13:43 UTC 2012 - sasc...@suse.de + +- Spec file cleanup: + * Factory preparation + +------------------------------------------------------------------- +Fri Jan 27 01:12:20 UTC 2012 - mrueck...@suse.de + +- update to 3.2.1 + just a version bump + +------------------------------------------------------------------- +Thu Jan 26 16:41:57 UTC 2012 - mrueck...@suse.de + +- initial package of the 3.2 branch + New: ---- CVE-2013-4389.patch actionmailer-3.2.12.gem rubygem-actionmailer-3_2.changes rubygem-actionmailer-3_2.spec ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ rubygem-actionmailer-3_2.spec ++++++ # # spec file for package rubygem-actionmailer-3_2 # # Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # Name: rubygem-actionmailer-3_2 Version: 3.2.12 Release: 0 Summary: Email composition, delivery, and receiving framework (part of Rails) License: MIT Group: Development/Languages/Ruby Url: http://www.rubyonrails.org %define mod_name actionmailer %define mod_full_name %{mod_name}-%{version} Source: %{mod_full_name}.gem Source1: CVE-2013-4389.patch BuildRequires: ruby-devel >= 1.8.7 BuildRequires: rubygem-actionpack-3_2 = 3.2.12 BuildRequires: rubygem-mail-2_4 >= 2.4.4 BuildRequires: rubygems_with_buildroot_patch Requires: ruby >= 1.8.7 Requires: rubygem-actionpack-3_2 = 3.2.12 Requires: rubygem-mail-2_4 >= 2.4.4 Provides: rubygem-%{mod_name} = %{version} Provides: rubygem-%{mod_name}-3 = %{version} BuildRoot: %{_tmppath}/%{name}-%{version}-build %rubygems_requires %description Email on Rails. Compose, deliver, receive, and test emails using the familiar controller/view pattern. First-class support for multipart email and attachments. %package doc Summary: RDoc documentation for %{mod_name} Group: Development/Languages/Ruby Requires: %{name} = %{version} %description doc Documentation generated at gem installation time. Usually in RDoc and RI formats. %prep %build %install %gem_install %{SOURCE0} pushd %{buildroot}/%{_libdir}/ruby/gems/%{rb_ver}/gems/%{mod_name}-%{version} patch -p2 < %{S:1} popd %files %defattr(-,root,root,-) %{_libdir}/ruby/gems/%{rb_ver}/cache/%{mod_full_name}.gem %{_libdir}/ruby/gems/%{rb_ver}/gems/%{mod_full_name}/ %{_libdir}/ruby/gems/%{rb_ver}/specifications/%{mod_full_name}.gemspec %files doc %defattr(-,root,root,-) %doc %{_libdir}/ruby/gems/%{rb_ver}/doc/%{mod_full_name}/ %changelog ++++++ CVE-2013-4389.patch ++++++ diff --git a/actionmailer/lib/action_mailer/log_subscriber.rb b/actionmailer/lib/action_mailer/log_subscriber.rb index 7ba57b1..4f4e21e 100644 --- a/actionmailer/lib/action_mailer/log_subscriber.rb +++ b/actionmailer/lib/action_mailer/log_subscriber.rb @@ -4,12 +4,12 @@ module ActionMailer class LogSubscriber < ActiveSupport::LogSubscriber def deliver(event) recipients = Array.wrap(event.payload[:to]).join(', ') - info("\nSent mail to #{recipients} (%1.fms)" % event.duration) + info("\nSent mail to #{recipients} (#{format_duration(event.duration)})") debug(event.payload[:mail]) end def receive(event) - info("\nReceived mail (%.1fms)" % event.duration) + info("\nReceived mail (#{format_duration(event.duration)})") debug(event.payload[:mail]) end @@ -19,4 +19,4 @@ module ActionMailer end end -ActionMailer::LogSubscriber.attach_to :action_mailer \ No newline at end of file +ActionMailer::LogSubscriber.attach_to :action_mailer -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
