Ruby/actionmailer/7.1.4
Email on Rails. Compose, deliver, and test emails using the familiar controller/view pattern. First-class support for multipart email and attachments.
https://rubygems.org/gems/actionmailer
MIT
1 Security Vulnerabilities
Possible ReDoS vulnerability in block_format in Action Mailer
Published date: 2024-10-15T23:35:38Z
CVE: CVE-2024-47889
Links:
There is a possible ReDoS vulnerability in the block_format helper in Action Mailer. This vulnerability has been assigned the CVE identifier CVE-2024-47889.
Impact
Carefully crafted text can cause the block_format helper to take an unexpected amount of time, possibly resulting in a DoS vulnerability. All users running an affected release should either upgrade or apply the relevant patch immediately.
Ruby 3.2 has mitigations for this problem, so Rails applications using Ruby 3.2 or newer are unaffected. Rails 8.0.0.beta1 requires Ruby 3.2 or greater so is unaffected.
Releases
The fixed releases are available at the normal locations.
Workarounds
Users can avoid calling the block_format helper or upgrade to Ruby 3.2
Credits
Thanks to ooooooo_q for the report!
Affected versions:
["7.2.0", "7.2.1", "7.1.0", "7.1.1", "7.1.2", "7.1.3", "7.1.3.2", "7.1.3.1", "7.1.3.3", "7.1.3.4", "7.1.4", "7.0.0", "7.0.1", "7.0.2", "7.0.2.2", "7.0.2.1", "7.0.2.3", "7.0.2.4", "7.0.3", "7.0.3.1", "7.0.4", "7.0.4.1", "7.0.4.2", "7.0.4.3", "7.0.5", "7.0.5.1", "7.0.6", "7.0.7", "7.0.7.2", "7.0.7.1", "7.0.8", "7.0.8.1", "7.0.8.2", "7.0.8.3", "7.0.8.4", "6.1.0.rc1", "6.0.3.4", "6.0.3.3", "6.0.3.2", "6.0.3.1", "6.0.3", "6.0.3.rc1", "6.0.2.2", "6.0.2.1", "6.0.2", "6.0.2.rc2", "6.0.2.rc1", "6.0.1", "6.0.1.rc1", "6.0.0", "6.0.0.rc2", "6.0.0.rc1", "6.0.0.beta3", "6.0.0.beta2", "6.0.0.beta1", "5.2.4.4", "5.2.4.3", "5.2.4.2", "5.2.4.1", "5.2.4", "5.2.4.rc1", "5.2.3", "5.2.3.rc1", "5.2.2.1", "5.2.2", "5.2.2.rc1", "5.2.1.1", "5.2.1", "5.2.1.rc1", "5.2.0", "5.2.0.rc2", "5.2.0.rc1", "5.2.0.beta2", "5.2.0.beta1", "5.1.7", "5.1.7.rc1", "5.1.6.2", "5.1.6.1", "5.1.6", "5.1.5", "5.1.5.rc1", "5.1.4", "5.1.4.rc1", "5.1.3", "5.1.3.rc3", "5.1.3.rc2", "5.1.3.rc1", "5.1.2", "5.1.2.rc1", "5.1.1", "5.1.0", "5.1.0.rc2", "5.1.0.rc1", "5.1.0.beta1", "5.0.7.2", "5.0.7.1", "5.0.7", "5.0.6", "5.0.6.rc1", "5.0.5", "5.0.5.rc2", "5.0.5.rc1", "5.0.4", "5.0.4.rc1", "5.0.3", "5.0.2", "5.0.2.rc1", "5.0.1", "5.0.1.rc2", "5.0.1.rc1", "5.0.0.1", "5.0.0", "5.0.0.rc2", "5.0.0.rc1", "5.0.0.racecar1", "5.0.0.beta4", "5.0.0.beta3", "5.0.0.beta2", "5.0.0.beta1.1", "5.0.0.beta1", "4.2.11.3", "4.2.11.2", "4.2.11.1", "4.2.11", "4.2.10", "4.2.10.rc1", "4.2.9", "4.2.9.rc2", "4.2.9.rc1", "4.2.8", "4.2.8.rc1", "4.2.7.1", "4.2.7", "4.2.7.rc1", "4.2.6", "4.2.6.rc1", "4.2.5.2", "4.2.5.1", "4.2.5", "4.2.5.rc2", "4.2.5.rc1", "4.2.4", "4.2.4.rc1", "4.2.3", "4.2.3.rc1", "4.2.2", "4.2.1", "4.2.1.rc4", "4.2.1.rc3", "4.2.1.rc2", "4.2.1.rc1", "4.2.0", "4.2.0.rc3", "4.2.0.rc2", "4.2.0.rc1", "4.2.0.beta4", "4.2.0.beta3", "4.2.0.beta2", "4.2.0.beta1", "4.1.16", "4.1.16.rc1", "4.1.15", "4.1.15.rc1", "4.1.14.2", "4.1.14.1", "4.1.14", "4.1.14.rc2", "4.1.14.rc1", "4.1.13", "4.1.13.rc1", "4.1.12", "4.1.12.rc1", "4.1.11", "4.1.10", "4.1.10.rc4", "4.1.10.rc3", "4.1.10.rc2", "4.1.10.rc1", "4.1.9", "4.1.9.rc1", "4.1.8", "4.1.7.1", "4.1.7", "4.1.6", "4.1.6.rc2", "4.1.6.rc1", "4.1.5", "4.1.4", "4.1.3", "4.1.2", "4.1.2.rc3", "4.1.2.rc2", "4.1.2.rc1", "4.1.1", "4.1.0", "4.1.0.rc2", "4.1.0.rc1", "4.1.0.beta2", "4.1.0.beta1", "4.0.13", "4.0.13.rc1", "4.0.12", "4.0.11.1", "4.0.11", "4.0.10", "4.0.10.rc2", "4.0.10.rc1", "4.0.9", "4.0.8", "4.0.7", "4.0.6", "4.0.6.rc3", "4.0.6.rc2", "4.0.6.rc1", "4.0.5", "4.0.4", "4.0.4.rc1", "4.0.3", "4.0.2", "4.0.1", "4.0.1.rc4", "4.0.1.rc3", "4.0.1.rc2", "4.0.1.rc1", "4.0.0", "4.0.0.rc2", "4.0.0.rc1", "4.0.0.beta1", "3.2.22.5", "3.2.22.4", "3.2.22.3", "3.2.22.2", "3.2.22.1", "3.2.22", "3.2.21", "3.2.20", "3.2.19", "3.2.18", "3.2.17", "3.2.16", "3.2.15", "3.2.15.rc3", "3.2.15.rc2", "3.2.15.rc1", "3.2.14", "3.2.14.rc2", "3.2.14.rc1", "3.2.13", "3.2.13.rc2", "3.2.13.rc1", "3.2.12", "3.2.11", "3.2.10", "3.2.9", "3.2.9.rc3", "3.2.9.rc2", "3.2.9.rc1", "3.2.8", "3.2.8.rc2", "3.2.8.rc1", "3.2.7", "3.2.7.rc1", "3.2.6", "3.2.5", "3.2.4", "3.2.4.rc1", "3.2.3", "3.2.3.rc2", "3.2.3.rc1", "3.2.2", "3.2.2.rc1", "3.2.1", "3.2.0", "3.2.0.rc2", "3.2.0.rc1", "3.1.12", "3.1.11", "3.1.10", "3.1.9", "3.1.8", "3.1.7", "3.1.6", "3.1.5", "3.1.5.rc1", "3.1.4", "3.1.4.rc1", "3.1.3", "3.1.2", "3.1.2.rc2", "3.1.2.rc1", "3.1.1", "3.1.1.rc3", "3.1.1.rc2", "3.1.1.rc1", "3.1.0", "3.1.0.rc8", "3.1.0.rc6", "3.1.0.rc5", "3.1.0.rc4", "3.1.0.rc3", "3.1.0.rc2", "3.1.0.rc1", "3.1.0.beta1", "3.0.20", "3.0.19", "3.0.18", "3.0.17", "3.0.16", "3.0.15", "3.0.14", "3.0.13", "3.0.13.rc1", "3.0.12", "3.0.12.rc1", "3.0.11", "3.0.10", "3.0.10.rc1", "3.0.9", "3.0.9.rc5", "3.0.9.rc4", "3.0.9.rc3", "3.0.9.rc1", "3.0.8", "3.0.8.rc4", "3.0.8.rc2", "3.0.8.rc1", "3.0.7", "3.0.7.rc2", "3.0.7.rc1", "3.0.6", "3.0.6.rc2", "3.0.6.rc1", "3.0.5", "3.0.5.rc1", "3.0.4", "3.0.4.rc1", "3.0.3", "3.0.2", "3.0.1", "3.0.0", "6.1.0.rc2", "6.1.0", "6.1.1", "6.1.2", "6.1.2.1", "6.0.3.5", "5.2.4.5", "6.1.3", "6.1.3.1", "6.0.3.6", "5.2.5", "6.1.3.2", "6.0.3.7", "5.2.6", "5.2.4.6", "6.0.4", "6.1.4", "6.1.4.1", "6.0.4.1", "6.1.4.3", "6.1.4.2", "6.0.4.3", "6.0.4.2", "6.1.4.4", "6.0.4.4", "6.1.4.6", "6.1.4.5", "6.0.4.6", "6.0.4.5", "5.2.6.2", "5.2.6.1", "6.1.4.7", "6.0.4.7", "5.2.6.3", "6.1.5", "5.2.7", "6.1.5.1", "6.0.4.8", "5.2.7.1", "6.1.6", "6.0.5", "5.2.8", "6.1.6.1", "6.0.5.1", "5.2.8.1", "6.1.7", "6.0.6", "6.1.7.1", "6.0.6.1", "6.1.7.2", "6.1.7.3", "6.1.7.4", "6.1.7.6", "6.1.7.5", "6.1.7.7", "6.1.7.8"]
Secure versions:
[2.3.18, 2.3.17, 2.3.16, 2.3.15, 2.3.14, 2.3.12, 2.3.11, 2.3.10, 2.3.9, 2.3.9.pre, 2.3.8, 2.3.8.pre1, 2.3.7, 2.3.6, 2.3.5, 2.3.4, 2.3.3, 2.3.2, 7.1.0.beta1, 7.1.0.rc1, 7.1.0.rc2, 8.0.0.beta1, 7.2.1.1, 7.1.4.1, 7.0.8.5, 6.1.7.9, 8.0.0.rc1, 7.2.1.2, 7.1.4.2, 7.0.8.6, 6.1.7.10, 8.0.0.rc2, 7.2.2, 7.1.5, 8.0.0]
Recommendation:
Update to version 8.0.0.
487 Other Versions
| Version | License | Security | Released | |
|---|---|---|---|---|
| 8.0.0 | MIT | 2024-11-07 - 22:30 | 3 days | |
| 8.0.0.rc2 | MIT | 2024-10-30 - 00:31 | 12 days | |
| 8.0.0.rc1 | MIT | 2024-10-19 - 01:43 | 23 days | |
| 8.0.0.beta1 | MIT | 2024-09-26 - 15:05 | about 2 months | |
| 7.2.2 | MIT | 2024-10-31 - 01:47 | 11 days | |
| 7.2.1.2 | MIT | 2024-10-23 - 22:34 | 18 days | |
| 7.2.1.1 | MIT | 2024-10-15 - 20:46 | 26 days | |
| 7.2.1 | MIT | 2 | 2024-08-22 - 19:46 | 3 months |
| 7.2.0 | MIT | 2 | 2024-08-09 - 23:27 | 3 months |
| 7.2.0.rc1 | MIT | 1 | 2024-08-06 - 17:01 | 3 months |
| 7.2.0.beta3 | MIT | 1 | 2024-07-11 - 15:20 | 4 months |
| 7.2.0.beta2 | MIT | 1 | 2024-06-04 - 18:14 | 5 months |
| 7.2.0.beta1 | MIT | 1 | 2024-05-29 - 23:38 | 5 months |
| 7.1.5 | MIT | 2024-10-31 - 01:34 | 11 days | |
| 7.1.4.2 | MIT | 2024-10-23 - 22:29 | 18 days | |
| 7.1.4.1 | MIT | 2024-10-15 - 20:40 | 26 days | |
| 7.1.4 | MIT | 1 | 2024-08-22 - 21:27 | 3 months |
| 7.1.3.4 | MIT | 1 | 2024-06-04 - 18:00 | 5 months |
| 7.1.3.3 | MIT | 1 | 2024-05-16 - 19:22 | 6 months |
| 7.1.3.2 | MIT | 1 | 2024-02-21 - 21:46 | 9 months |
| 7.1.3.1 | MIT | 1 | 2024-02-21 - 18:46 | 9 months |
| 7.1.3 | MIT | 1 | 2024-01-16 - 22:55 | 10 months |
| 7.1.2 | MIT | 1 | 2023-11-10 - 21:51 | almost 1 year |
| 7.1.1 | MIT | 1 | 2023-10-11 - 22:18 | about 1 year |
| 7.1.0 | MIT | 1 | 2023-10-05 - 08:08 | about 1 year |
| 7.1.0.rc2 | MIT | 2023-10-01 - 22:01 | about 1 year | |
| 7.1.0.rc1 | MIT | 2023-09-27 - 04:02 | about 1 year | |
| 7.1.0.beta1 | MIT | 2023-09-13 - 00:40 | about 1 year | |
| 7.0.8.6 | MIT | 2024-10-23 - 22:23 | 18 days | |
| 7.0.8.5 | MIT | 2024-10-15 - 20:28 | 26 days | |
| 7.0.8.4 | MIT | 1 | 2024-06-04 - 17:56 | 5 months |
| 7.0.8.3 | MIT | 1 | 2024-05-17 - 19:53 | 6 months |
| 7.0.8.2 | MIT | 1 | 2024-05-16 - 18:59 | 6 months |
| 7.0.8.1 | MIT | 1 | 2024-02-21 - 18:42 | 9 months |
| 7.0.8 | MIT | 2 | 2023-09-09 - 19:13 | about 1 year |
| 7.0.7.2 | MIT | 2 | 2023-08-22 - 20:10 | about 1 year |
| 7.0.7.1 | MIT | 2 | 2023-08-22 - 17:20 | about 1 year |
| 7.0.7 | MIT | 2 | 2023-08-09 - 23:57 | over 1 year |
| 7.0.6 | MIT | 2 | 2023-06-29 - 20:56 | over 1 year |
| 7.0.5.1 | MIT | 2 | 2023-06-26 - 21:42 | over 1 year |
| 7.0.5 | MIT | 2 | 2023-05-24 - 19:12 | over 1 year |
| 7.0.4.3 | MIT | 2 | 2023-03-13 - 18:53 | over 1 year |
| 7.0.4.2 | MIT | 2 | 2023-01-25 - 03:14 | almost 2 years |
| 7.0.4.1 | MIT | 2 | 2023-01-17 - 18:55 | almost 2 years |
| 7.0.4 | MIT | 2 | 2022-09-09 - 18:42 | about 2 years |
| 7.0.3.1 | MIT | 2 | 2022-07-12 - 17:31 | over 2 years |
| 7.0.3 | MIT | 2 | 2022-05-09 - 13:40 | over 2 years |
| 7.0.2.4 | MIT | 2 | 2022-04-26 - 19:33 | over 2 years |
| 7.0.2.3 | MIT | 2 | 2022-03-08 - 17:50 | over 2 years |
| 7.0.2.2 | MIT | 2 | 2022-02-11 - 19:44 | over 2 years |
| 7.0.2.1 | MIT | 2 | 2022-02-11 - 18:18 | over 2 years |
| 7.0.2 | MIT | 2 | 2022-02-08 - 23:12 | almost 3 years |
| 7.0.1 | MIT | 2 | 2022-01-06 - 21:54 | almost 3 years |
| 7.0.0 | MIT | 2 | 2021-12-15 - 23:43 | almost 3 years |
| 7.0.0.rc3 | MIT | 1 | 2021-12-14 - 23:04 | almost 3 years |
| 7.0.0.rc2 | MIT | 1 | 2021-12-14 - 19:39 | almost 3 years |
| 7.0.0.rc1 | MIT | 1 | 2021-12-06 - 21:31 | almost 3 years |
| 7.0.0.alpha2 | MIT | 1 | 2021-09-15 - 23:15 | about 3 years |
| 7.0.0.alpha1 | MIT | 1 | 2021-09-15 - 21:56 | about 3 years |
| 6.1.7.10 | MIT | 2024-10-23 - 21:58 | 18 days | |
| 6.1.7.9 | MIT | 2024-10-15 - 21:25 | 26 days | |
| 6.1.7.8 | MIT | 1 | 2024-06-04 - 17:55 | 5 months |
| 6.1.7.7 | MIT | 1 | 2024-02-21 - 18:39 | 9 months |
| 6.1.7.6 | MIT | 1 | 2023-08-22 - 20:07 | about 1 year |
| 6.1.7.5 | MIT | 1 | 2023-08-22 - 17:15 | about 1 year |
| 6.1.7.4 | MIT | 1 | 2023-06-26 - 21:31 | over 1 year |
| 6.1.7.3 | MIT | 1 | 2023-03-13 - 18:48 | over 1 year |
| 6.1.7.2 | MIT | 1 | 2023-01-25 - 03:23 | almost 2 years |
| 6.1.7.1 | MIT | 1 | 2023-01-17 - 18:54 | almost 2 years |
| 6.1.7 | MIT | 2 | 2022-09-09 - 18:38 | about 2 years |
| 6.1.6.1 | MIT | 2 | 2022-07-12 - 17:29 | over 2 years |
| 6.1.6 | MIT | 2 | 2022-05-09 - 13:45 | over 2 years |
| 6.1.5.1 | MIT | 2 | 2022-04-26 - 19:30 | over 2 years |
| 6.1.5 | MIT | 2 | 2022-03-10 - 21:16 | over 2 years |
| 6.1.4.7 | MIT | 2 | 2022-03-08 - 17:48 | over 2 years |
| 6.1.4.6 | MIT | 2 | 2022-02-11 - 19:41 | over 2 years |
| 6.1.4.5 | MIT | 2 | 2022-02-11 - 18:22 | over 2 years |
| 6.1.4.4 | MIT | 2 | 2021-12-15 - 22:53 | almost 3 years |
| 6.1.4.3 | MIT | 2 | 2021-12-14 - 23:02 | almost 3 years |
| 6.1.4.2 | MIT | 2 | 2021-12-14 - 19:49 | almost 3 years |
| 6.1.4.1 | MIT | 2 | 2021-08-19 - 16:26 | about 3 years |
| 6.1.4 | MIT | 2 | 2021-06-24 - 20:40 | over 3 years |
| 6.1.3.2 | MIT | 2 | 2021-05-05 - 15:46 | over 3 years |
| 6.1.3.1 | MIT | 2 | 2021-03-26 - 18:06 | over 3 years |
| 6.1.3 | MIT | 2 | 2021-02-17 - 18:42 | over 3 years |
| 6.1.2.1 | MIT | 2 | 2021-02-10 - 20:44 | over 3 years |
| 6.1.2 | MIT | 2 | 2021-02-09 - 21:28 | almost 4 years |
| 6.1.1 | MIT | 2 | 2021-01-07 - 22:59 | almost 4 years |
| 6.1.0 | MIT | 2 | 2020-12-09 - 19:57 | almost 4 years |
| 6.1.0.rc2 | MIT | 2 | 2020-12-01 - 22:01 | almost 4 years |
| 6.1.0.rc1 | MIT | 2 | 2020-11-02 - 21:20 | about 4 years |
| 6.0.6.1 | MIT | 2 | 2023-01-17 - 18:53 | almost 2 years |
| 6.0.6 | MIT | 2 | 2022-09-09 - 18:32 | about 2 years |
| 6.0.5.1 | MIT | 2 | 2022-07-12 - 17:28 | over 2 years |
| 6.0.5 | MIT | 2 | 2022-05-09 - 13:50 | over 2 years |
| 6.0.4.8 | MIT | 2 | 2022-04-26 - 19:27 | over 2 years |
| 6.0.4.7 | MIT | 2 | 2022-03-08 - 17:47 | over 2 years |
| 6.0.4.6 | MIT | 2 | 2022-02-11 - 19:39 | over 2 years |
| 6.0.4.5 | MIT | 2 | 2022-02-11 - 18:25 | over 2 years |
| 6.0.4.4 | MIT | 2 | 2021-12-15 - 22:47 | almost 3 years |