actionmailer 6.1.7.7 → 6.1.7.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b3fee18d296bf00894ec16a40145318a07ab7a804139917b1e5bd58a412f23c8
-  data.tar.gz: '0394c716431f23e244cb077cc00c382fa2e0f45a01c3d7b9baa843444a1914e5'
+  metadata.gz: c6e0c297d1cc4470f18f50cd617c0ddc77a7a0b2bcf6d1d0f7aff7f185d50aef
+  data.tar.gz: 1104bf4c69a8dd807da4d9e14270f295fe69031f1214d7d943fa2896156bbb54
 SHA512:
-  metadata.gz: 9b4acaf1cb580284c0a85d920e28bce71e4336724a4d6b2da466e5faf67efa5bd607a45c5ce36888c8c3e713be5eae2863a3261ae8a69a45ff4134c63bee1797
-  data.tar.gz: 4951521c2a7b38a503bbd7ebe3123dd14242d92981308a925fe2684eb5bb62627e15948a7634dc70cb774f278d2b101305d4c5fb812be41e70042f1d83ff8e32
+  metadata.gz: b75f90e815dd9e8892e62239db930128ffc99e69e8090cd740503113a89e4a21462dcfcd2ed6d64fab669510dba5f1cce5f3b0dfe1a0b074f592f4e6acb28501
+  data.tar.gz: ab9c337124a8fdad5fd0dbae7a8dedc2002d5cedc20d93b2996fecbbaa5b583ebbc79effbe827fcc4ca4c8ccf4f522e9ebc67dfd2377ad89c165068a307edeac

data/CHANGELOG.md

@@ -1,3 +1,15 @@
+## Rails 6.1.7.9 (October 15, 2024) ##
+
+*   Avoid regex backtracking in `block_format` helper
+
+    [CVE-2024-47889]
+
+
+## Rails 6.1.7.8 (June 04, 2024) ##
+
+*   No changes.
+
+
 ## Rails 6.1.7.7 (February 21, 2024) ##
 
 *   No changes.

data/lib/action_mailer/gem_version.rb

@@ -10,7 +10,7 @@ module ActionMailer
     MAJOR = 6
     MINOR = 1
     TINY  = 7
-    PRE   = "7"
+    PRE   = "9"
 
     STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
   end

data/lib/action_mailer/mail_helper.rb

@@ -23,10 +23,18 @@ module ActionMailer
       }.join("\n\n")
 
       # Make list points stand on their own line
-      formatted.gsub!(/[ ]*([*]+) ([^*]*)/) { "  #{$1} #{$2.strip}\n" }
-      formatted.gsub!(/[ ]*([#]+) ([^#]*)/) { "  #{$1} #{$2.strip}\n" }
+      output = +""
+      splits = formatted.split(/(\*+|\#+)/)
+      while line = splits.shift
+        if line.start_with?("*", "#") && splits[0].start_with?(" ")
+          output.chomp!(" ") while output.end_with?(" ")
+          output << "  #{line} #{splits.shift.strip}\n"
+        else
+          output << line
+        end
+      end
 
-      formatted
+      output
     end
 
     # Access the mailer instance.

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: actionmailer
 version: !ruby/object:Gem::Version
-  version: 6.1.7.7
+  version: 6.1.7.9
 platform: ruby
 authors:
 - David Heinemeier Hansson
-autorequire:
+autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-02-21 00:00:00.000000000 Z
+date: 2024-10-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -16,56 +16,56 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.1.7.7
+        version: 6.1.7.9
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.1.7.7
+        version: 6.1.7.9
 - !ruby/object:Gem::Dependency
   name: actionpack
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.1.7.7
+        version: 6.1.7.9
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.1.7.7
+        version: 6.1.7.9
 - !ruby/object:Gem::Dependency
   name: actionview
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.1.7.7
+        version: 6.1.7.9
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.1.7.7
+        version: 6.1.7.9
 - !ruby/object:Gem::Dependency
   name: activejob
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.1.7.7
+        version: 6.1.7.9
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.1.7.7
+        version: 6.1.7.9
 - !ruby/object:Gem::Dependency
   name: mail
   requirement: !ruby/object:Gem::Requirement
@@ -138,12 +138,12 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/rails/rails/issues
-  changelog_uri: https://github.com/rails/rails/blob/v6.1.7.7/actionmailer/CHANGELOG.md
-  documentation_uri: https://api.rubyonrails.org/v6.1.7.7/
+  changelog_uri: https://github.com/rails/rails/blob/v6.1.7.9/actionmailer/CHANGELOG.md
+  documentation_uri: https://api.rubyonrails.org/v6.1.7.9/
   mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
-  source_code_uri: https://github.com/rails/rails/tree/v6.1.7.7/actionmailer
+  source_code_uri: https://github.com/rails/rails/tree/v6.1.7.9/actionmailer
   rubygems_mfa_required: 'true'
-post_install_message:
+post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -159,8 +159,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements:
 - none
-rubygems_version: 3.2.22
-signing_key:
+rubygems_version: 3.5.16
+signing_key: 
 specification_version: 4
 summary: Email composition and delivery framework (part of Rails).
 test_files: []