actionmailer 7.1.4 → 7.1.4.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 68fae8f1d9b4b077065f4868328be95ef08904008c4c2e2626c23c61fe1558bb
-  data.tar.gz: 077dc05436edfa22f0151778079a3b1d1a88cc6991b20e3e5748f90ddff0b368
+  metadata.gz: a7741f9efb7e3e52734cbf25529392dc53d3fac9e7bbce60d91e94be72226ae9
+  data.tar.gz: b791f9bcd5ca682fdb03df9f221bc86dda627188f66c25fa24bd387646ab779c
 SHA512:
-  metadata.gz: f5775ac5064ffb20a30d4055c9e7bf880a121b1e8ceff74e452139af025c26b5e8741f3074b6b0b3dc75fc70ae0ef0a46559cd35e7b2c021392fb3a2d03bd3d2
-  data.tar.gz: 1946646402e6ac678ba26a5d3b30906dc07e72eaeb30c174d44f26cedeb57224955284b0316e549907974109ab4a2ecafae8f042094c6fc8ffdc1a4073cee6e7
+  metadata.gz: e7517577d45d0b94b39f13c6f329359ff65d742e25ebae2b90f291bc1b1a6af138cdfd3528345652fd2455a47b66e98193b9fe707764b3f59b29c1072be96c5c
+  data.tar.gz: bc55eba8fa7a80243a1ccc402e0805f0d009a99890c93c56601cc183b2d80034aa9317148c39a8e54df1d1a19bf56b9b19b38a86195c271ff290b150e5a2b559

data/CHANGELOG.md

@@ -1,3 +1,9 @@
+## Rails 7.1.4.1 (October 15, 2024) ##
+
+*   Avoid regex backtracking in `block_format` helper
+
+    [CVE-2024-47889]
+
 ## Rails 7.1.4 (August 22, 2024) ##
 
 *   No changes.

data/lib/action_mailer/gem_version.rb

@@ -10,7 +10,7 @@ module ActionMailer
     MAJOR = 7
     MINOR = 1
     TINY  = 4
-    PRE   = nil
+    PRE   = "1"
 
     STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
   end

data/lib/action_mailer/mail_helper.rb

@@ -25,10 +25,18 @@ module ActionMailer
       }.join("\n\n")
 
       # Make list points stand on their own line
-      formatted.gsub!(/[ ]*([*]+) ([^*]*)/) { "  #{$1} #{$2.strip}\n" }
-      formatted.gsub!(/[ ]*([#]+) ([^#]*)/) { "  #{$1} #{$2.strip}\n" }
+      output = +""
+      splits = formatted.split(/(\*+|\#+)/)
+      while line = splits.shift
+        if line.start_with?("*", "#") && splits[0].start_with?(" ")
+          output.chomp!(" ") while output.end_with?(" ")
+          output << "  #{line} #{splits.shift.strip}\n"
+        else
+          output << line
+        end
+      end
 
-      formatted
+      output
     end
 
     # Access the mailer instance.

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: actionmailer
 version: !ruby/object:Gem::Version
-  version: 7.1.4
+  version: 7.1.4.1
 platform: ruby
 authors:
 - David Heinemeier Hansson
-autorequire:
+autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-08-22 00:00:00.000000000 Z
+date: 2024-10-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -16,56 +16,56 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.1.4
+        version: 7.1.4.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.1.4
+        version: 7.1.4.1
 - !ruby/object:Gem::Dependency
   name: actionpack
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.1.4
+        version: 7.1.4.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.1.4
+        version: 7.1.4.1
 - !ruby/object:Gem::Dependency
   name: actionview
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.1.4
+        version: 7.1.4.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.1.4
+        version: 7.1.4.1
 - !ruby/object:Gem::Dependency
   name: activejob
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.1.4
+        version: 7.1.4.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.1.4
+        version: 7.1.4.1
 - !ruby/object:Gem::Dependency
   name: mail
   requirement: !ruby/object:Gem::Requirement
@@ -182,12 +182,12 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/rails/rails/issues
-  changelog_uri: https://github.com/rails/rails/blob/v7.1.4/actionmailer/CHANGELOG.md
-  documentation_uri: https://api.rubyonrails.org/v7.1.4/
+  changelog_uri: https://github.com/rails/rails/blob/v7.1.4.1/actionmailer/CHANGELOG.md
+  documentation_uri: https://api.rubyonrails.org/v7.1.4.1/
   mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
-  source_code_uri: https://github.com/rails/rails/tree/v7.1.4/actionmailer
+  source_code_uri: https://github.com/rails/rails/tree/v7.1.4.1/actionmailer
   rubygems_mfa_required: 'true'
-post_install_message:
+post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -203,8 +203,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements:
 - none
-rubygems_version: 3.5.11
-signing_key:
+rubygems_version: 3.5.16
+signing_key: 
 specification_version: 4
 summary: Email composition and delivery framework (part of Rails).
 test_files: []