mail 2.4.3 → 2.4.4

data/CHANGELOG.rdoc

@@ -1,5 +1,9 @@
 == HEAD
 
+== Version 2.4.4 - Wed Mar 14 22:44:00 +1100 2012 Mikel Lindsaar <mikel@reinteractive.net>
+
+* Fix security vulnerability allowing command line exploit when using file delivery method
+
 == Version 2.4.3 - Tue Mar 6 19:38:00 UTC 2012 Mikel Lindsaar <mikel@reinteractive.net>
 
 * Fix security vulnerability allowing command line exploit when using exim or sendmail from the command line

data/Gemfile.lock

@@ -1,28 +1,23 @@
 GEM
   remote: http://rubygems.org/
   specs:
-    ZenTest (4.4.2)
     activesupport (3.0.6)
-    columnize (0.3.6)
+    bouncy-castle-java (1.5.0146.1)
     diff-lcs (1.1.3)
     i18n (0.5.0)
-    linecache (0.46)
-      rbx-require-relative (> 0.0.4)
+    jruby-openssl (0.7.4)
+      bouncy-castle-java
     mime-types (1.16)
     polyglot (0.3.3)
-    rake (0.8.7)
-    rbx-require-relative (0.0.5)
-    rspec (1.3.2)
-    rspec-core (2.4.0)
-    rspec-expectations (2.4.0)
+    rake (0.9.2.2)
+    rspec (2.8.0)
+      rspec-core (~> 2.8.0)
+      rspec-expectations (~> 2.8.0)
+      rspec-mocks (~> 2.8.0)
+    rspec-core (2.8.0)
+    rspec-expectations (2.8.0)
       diff-lcs (~> 1.1.2)
-    rspec-mocks (2.4.0)
-    ruby-debug (0.10.4)
-      columnize (>= 0.1)
-      ruby-debug-base (~> 0.10.4.0)
-    ruby-debug-base (0.10.4)
-      linecache (>= 0.3)
-    ruby-debug-base (0.10.4-java)
+    rspec-mocks (2.8.0)
     treetop (1.4.10)
       polyglot
       polyglot (>= 0.3.1)
@@ -32,16 +27,10 @@ PLATFORMS
   ruby
 
 DEPENDENCIES
-  ZenTest (~> 4.4.0)
   activesupport (>= 2.3.6)
-  bundler
-  diff-lcs
   i18n (>= 0.4.0)
+  jruby-openssl
   mime-types (~> 1.16)
-  rake (~> 0.8.7)
-  rspec (~> 1.3.0)
-  rspec-core (~> 2.4.0)
-  rspec-expectations (~> 2.4.0)
-  rspec-mocks (~> 2.4.0)
-  ruby-debug
-  treetop (~> 1.4.8)
+  rake (> 0.8.7)
+  rspec (~> 2.8.0)
+  treetop (~> 1.4.10)

data/lib/VERSION

@@ -1,4 +1,4 @@
 major:2
 minor:4
-patch:3
+patch:4
 build:

data/lib/mail/network/delivery_methods/file_delivery.rb

@@ -6,7 +6,7 @@ module Mail
   # So if you have an email going to fred@test, bob@test, joe@anothertest, and you
   # set your location path to /path/to/mails then FileDelivery will create the directory
   # if it does not exist, and put one copy of the email in three files, called
-  # "fred@test", "bob@test" and "joe@anothertest"
+  # by their message id
   # 
   # Make sure the path you specify with :location is writable by the Ruby process
   # running Mail.
@@ -32,7 +32,7 @@ module Mail
       end
 
       mail.destinations.uniq.each do |to|
-        ::File.open(::File.join(settings[:location], to), 'a') { |f| "#{f.write(mail.encoded)}\r\n\r\n" }
+        ::File.open(::File.join(settings[:location], File.basename(to.to_s)), 'a') { |f| "#{f.write(mail.encoded)}\r\n\r\n" }
       end
     end
     

metadata

@@ -1,82 +1,59 @@
---- !ruby/object:Gem::Specification 
+--- !ruby/object:Gem::Specification
 name: mail
-version: !ruby/object:Gem::Version 
-  hash: 25
-  prerelease: false
-  segments: 
-  - 2
-  - 4
-  - 3
-  version: 2.4.3
+version: !ruby/object:Gem::Version
+  version: 2.4.4
+  prerelease: 
 platform: ruby
-authors: 
+authors:
 - Mikel Lindsaar
 autorequire: 
 bindir: bin
 cert_chain: []
-
-date: 2012-03-06 00:00:00 +11:00
-default_executable: 
-dependencies: 
-- !ruby/object:Gem::Dependency 
+date: 2012-03-14 00:00:00.000000000Z
+dependencies:
+- !ruby/object:Gem::Dependency
   name: mime-types
-  prerelease: false
-  requirement: &id001 !ruby/object:Gem::Requirement 
+  requirement: &70305676450460 !ruby/object:Gem::Requirement
     none: false
-    requirements: 
+    requirements:
     - - ~>
-      - !ruby/object:Gem::Version 
-        hash: 47
-        segments: 
-        - 1
-        - 16
-        version: "1.16"
+      - !ruby/object:Gem::Version
+        version: '1.16'
   type: :runtime
-  version_requirements: *id001
-- !ruby/object:Gem::Dependency 
-  name: treetop
   prerelease: false
-  requirement: &id002 !ruby/object:Gem::Requirement 
+  version_requirements: *70305676450460
+- !ruby/object:Gem::Dependency
+  name: treetop
+  requirement: &70305676449980 !ruby/object:Gem::Requirement
     none: false
-    requirements: 
+    requirements:
     - - ~>
-      - !ruby/object:Gem::Version 
-        hash: 23
-        segments: 
-        - 1
-        - 4
-        - 8
+      - !ruby/object:Gem::Version
         version: 1.4.8
   type: :runtime
-  version_requirements: *id002
-- !ruby/object:Gem::Dependency 
-  name: i18n
   prerelease: false
-  requirement: &id003 !ruby/object:Gem::Requirement 
+  version_requirements: *70305676449980
+- !ruby/object:Gem::Dependency
+  name: i18n
+  requirement: &70305676449520 !ruby/object:Gem::Requirement
     none: false
-    requirements: 
-    - - ">="
-      - !ruby/object:Gem::Version 
-        hash: 15
-        segments: 
-        - 0
-        - 4
-        - 0
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
         version: 0.4.0
   type: :runtime
-  version_requirements: *id003
+  prerelease: false
+  version_requirements: *70305676449520
 description: A really Ruby Mail handler.
 email: raasdnil@gmail.com
 executables: []
-
 extensions: []
-
-extra_rdoc_files: 
+extra_rdoc_files:
 - README.md
 - CONTRIBUTING.md
 - CHANGELOG.rdoc
 - TODO.rdoc
-files: 
+files:
 - README.md
 - CONTRIBUTING.md
 - CHANGELOG.rdoc
@@ -217,39 +194,28 @@ files:
 - lib/tasks/corpus.rake
 - lib/tasks/treetop.rake
 - lib/VERSION
-has_rdoc: true
 homepage: http://github.com/mikel/mail
 licenses: []
-
 post_install_message: 
 rdoc_options: []
-
-require_paths: 
+require_paths:
 - lib
-required_ruby_version: !ruby/object:Gem::Requirement 
+required_ruby_version: !ruby/object:Gem::Requirement
   none: false
-  requirements: 
-  - - ">="
-    - !ruby/object:Gem::Version 
-      hash: 3
-      segments: 
-      - 0
-      version: "0"
-required_rubygems_version: !ruby/object:Gem::Requirement 
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
   none: false
-  requirements: 
-  - - ">="
-    - !ruby/object:Gem::Version 
-      hash: 3
-      segments: 
-      - 0
-      version: "0"
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
 requirements: []
-
 rubyforge_project: 
-rubygems_version: 1.3.7
+rubygems_version: 1.8.15
 signing_key: 
 specification_version: 3
 summary: Mail provides a nice Ruby DSL for making, sending and reading emails.
 test_files: []
-