6f11774
# Generated from actionpack-1.13.5.gem by gem2rpm -*- rpm-spec -*-
6f11774
%define ruby_sitelib %(ruby -rrbconfig -e "puts Config::CONFIG['sitelibdir']")
6f11774
%define gemdir %(ruby -rubygems -e 'puts Gem::dir' 2>/dev/null)
6f11774
%define gemname actionpack
6f11774
%define geminstdir %{gemdir}/gems/%{gemname}-%{version}
6f11774
6f11774
Summary: Web-flow and rendering framework putting the VC in MVC
6f11774
Name: rubygem-%{gemname}
23b1576
Version: 2.1.1
8acc278
Release: 4%{?dist}
6f11774
Group: Development/Languages
6f11774
License: MIT
6f11774
URL: http://www.rubyonrails.org
ccdb564
Source0: http://gems.rubyforge.org/gems/%{gemname}-%{version}.tgz
ccdb564
Patch1: rubygem-actionpack-2.1.2-CVE-2008-5189.patch
40ac7e5
# http://weblog.rubyonrails.org/2009/9/4/xss-vulnerability-in-ruby-on-rails
40ac7e5
Patch2: rubygem-actionpack-2.1.x-CVE-2009-3009.patch
8acc278
# bug 544329
8acc278
Patch3: rubygem-actionpack-2.1.x-verify-also-text.patch
8acc278
# bug 542786
8acc278
Patch4: rubygem-actionpack-2.2.x-strip_tag-for-nonprintable.patch
6f11774
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
6f11774
Requires: rubygems
486c13f
Requires: rubygem(activesupport) = %{version}
6f11774
BuildRequires: rubygems
ccdb564
BuildRequires: rubygem-rake
6f11774
BuildArch: noarch
6f11774
Provides: rubygem(%{gemname}) = %{version}
6f11774
6f11774
%description
6f11774
Eases web-request routing, handling, and response as a half-way front,
6f11774
half-way page controller. Implemented with specific emphasis on enabling easy
6f11774
unit/integration testing that doesn't require a browser.
6f11774
6f11774
6f11774
%prep
ccdb564
%setup -q -n %{gemname}-%{version}
ccdb564
%patch1 -p2
40ac7e5
%patch2 -p2
8acc278
%patch3 -p2
8acc278
%patch4 -p2
6f11774
6f11774
%build
ccdb564
rake gem
6f11774
6f11774
%install
6f11774
rm -rf %{buildroot}
6f11774
mkdir -p %{buildroot}%{gemdir}
6f11774
gem install --local --install-dir %{buildroot}%{gemdir} \
ccdb564
            --force --rdoc pkg/%{gemname}-%{version}.gem
6f11774
6f11774
sed -i -e 1d %{buildroot}%{geminstdir}/lib/action_controller/session/drb_server.rb
6f11774
6f11774
%clean
6f11774
rm -rf %{buildroot}
6f11774
6f11774
%files
6f11774
%defattr(-, root, root, -)
6f11774
%dir %{geminstdir}
7d84d5c
%doc %{geminstdir}/CHANGELOG
6f11774
%{geminstdir}/install.rb
6f11774
%{geminstdir}/lib
6f11774
%doc %{geminstdir}/MIT-LICENSE
6f11774
%{geminstdir}/Rakefile
6f11774
%doc %{geminstdir}/README
6f11774
%doc %{geminstdir}/RUNNING_UNIT_TESTS
6f11774
%{geminstdir}/test/
6f11774
%doc %{gemdir}/doc/%{gemname}-%{version}
6f11774
%{gemdir}/cache/%{gemname}-%{version}.gem
6f11774
%{gemdir}/specifications/%{gemname}-%{version}.gemspec
6f11774
6f11774
6f11774
%changelog
8acc278
* Mon Dec  7 2009 Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 2.1.1-4
8acc278
- Fix for potential CSRF protection circumvention (bug 544329)
8acc278
- Fix for XSS weakness in strip_tags (bug 542786)
8acc278
40ac7e5
* Mon Sep 21 2009 Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 2.1.1-3
40ac7e5
- Patch for CVE-2009-3009 (bug 520843)
40ac7e5
ccdb564
* Thu Feb 26 2009 Jeroen van Meeuwen <kanarip@fedoraproject.org> - 2.1.1-2
ccdb564
- Fix CVE-2008-5189
ccdb564
23b1576
* Tue Sep 16 2008 David Lutterkort <dlutter@redhat.com> - 2.1.1-1
23b1576
- New version (fixes CVE-2008-4094)
23b1576
ad1a75b
* Thu Jul 31 2008 Michael Stahnke <stahnma@fedoraproject.org> - 2.1.0-1
ad1a75b
- New Upstream
23b1576
486c13f
* Tue Apr  8 2008 David Lutterkort <dlutter@redhat.com> - 2.0.2-2
486c13f
- Fix dependency
486c13f
d96bd35
* Mon Apr 07 2008 David Lutterkort <dlutter@redhat.com> - 2.0.2-1
d96bd35
- New version
d96bd35
7d84d5c
* Mon Dec 10 2007 David Lutterkort <dlutter@redhat.com> - 2.0.1-1
7d84d5c
- New version
7d84d5c
6f11774
* Thu Nov 29 2007 David Lutterkort <dlutter@redhat.com> - 1.13.6-1
6f11774
- New version
6f11774
6f11774
* Tue Nov 14 2007 David Lutterkort <dlutter@redhat.com> - 1.13.5-2
6f11774
- Fix buildroot; mark docs in geminstdir cleanly
6f11774
6f11774
* Tue Oct 30 2007 David Lutterkort <dlutter@redhat.com> - 1.13.5-1
6f11774
- Initial package