Index: trunk/server/fedora/Makefile
===================================================================
--- trunk/server/fedora/Makefile	(revision 1328)
+++ trunk/server/fedora/Makefile	(revision 1329)
@@ -19,5 +19,5 @@
 # See /COPYRIGHT in this repository for more information.
 
-upstream_yum	= krb5 httpd openssh php
+upstream_yum	= krb5 httpd openssh php rubygem-activesupport-2.3.2-1.fc11 rubygem-actionpack-2.3.2-1.fc11
 upstream	= openafs $(upstream_yum)
 oursrc		= execsys tokensys accountadm httpdmods logview sql-signup nss_nonlocal nss_nonlocal.i586 whoisd mit-zephyr athrun php_scripts scripts-base
@@ -133,7 +133,7 @@
 	rpmbuild $(rpmbuild_args) -bb ${tmp_specs}/$**.spec
 
-$(upstream) openafs-kernel: rpmbuild_args += --define 'scriptsversion $(shell svnversion ${patches} | tr ':' '_')'
+$(upstream) rubygem-activesupport rubygem-actionpack openafs-kernel: rpmbuild_args += --define 'scriptsversion $(shell svnversion ${patches} | tr ':' '_')'
 
-$(upstream): setup patch-specs
+$(upstream) rubygem-activesupport rubygem-actionpack: setup patch-specs
 	rpmbuild $(rpmbuild_args) -ba ${tmp_specs}/$@.spec
 
Index: trunk/server/fedora/specs/rubygem-actionpack.spec.patch
===================================================================
--- trunk/server/fedora/specs/rubygem-actionpack.spec.patch	(revision 1329)
+++ trunk/server/fedora/specs/rubygem-actionpack.spec.patch	(revision 1329)
@@ -0,0 +1,44 @@
+--- rubygem-actionpack.spec.orig	2009-10-01 04:46:42.000000000 -0400
++++ rubygem-actionpack.spec	2009-10-01 06:01:01.000000000 -0400
+@@ -7,17 +7,19 @@
+ Summary: Web-flow and rendering framework putting the VC in MVC
+ Name: rubygem-%{gemname}
+ Version: 2.3.2
+-Release: 1%{?dist}
++Release: 1.scripts.%{scriptsversion}%{?dist}
+ Group: Development/Languages
+ License: MIT
+ URL: http://www.rubyonrails.org
+ Source0: http://gems.rubyforge.org/gems/%{gemname}-%{version}.gem
++Patch0: rubygem-actionpack-2.3.x-CVE-2009-3009.patch
+ BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+ Requires: rubygems
+ Requires: rubygem(activesupport) = %{version}
+ BuildRequires: rubygems
+ BuildArch: noarch
+ Provides: rubygem(%{gemname}) = %{version}
++Provides: scripts-rubygem-actionpack
+ 
+ %description
+ Eases web-request routing, handling, and response as a half-way front,
+@@ -35,6 +37,10 @@
+ gem install --local --install-dir %{buildroot}%{gemdir} \
+             --force --rdoc %{SOURCE0}
+ 
++pushd %{buildroot}%{geminstdir}
++cat %{PATCH0} | patch -s -p2
++popd
++
+ # Remove backup files
+ find %{buildroot}/%{geminstdir} -type f -name "*~" -delete
+ 
+@@ -71,6 +77,9 @@
+ 
+ 
+ %changelog
++* Thu Oct 01 2009 Mitchell Berger <mitchb@mit.edu> - 2.3.2-1.scripts
++- Patch for CVE-2009-3009
++
+ * Mon Mar 16 2009 Jeroen van Meeuwen <j.van.meeuwen@ogd.nl> - 2.3.2-1
+ - New upstream version
+ 
Index: trunk/server/fedora/specs/rubygem-activesupport.spec.patch
===================================================================
--- trunk/server/fedora/specs/rubygem-activesupport.spec.patch	(revision 1329)
+++ trunk/server/fedora/specs/rubygem-activesupport.spec.patch	(revision 1329)
@@ -0,0 +1,50 @@
+--- rubygem-activesupport.spec.orig	2009-10-01 04:39:58.000000000 -0400
++++ rubygem-activesupport.spec	2009-10-01 05:47:21.000000000 -0400
+@@ -8,16 +8,18 @@
+ Name: rubygem-%{gemname}
+ 
+ Version: 2.3.2
+-Release: 1%{?dist}
++Release: 1.scripts.%{scriptsversion}%{?dist}
+ Group: Development/Languages
+ License: MIT
+ URL: http://www.rubyonrails.org
+ Source0: http://gems.rubyforge.org/gems/%{gemname}-%{version}.gem
++Patch0: rubygem-activesupport-2.3.x-CVE-2009-3009.patch
+ BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+ Requires: rubygems
+ BuildRequires: rubygems
+ BuildArch: noarch
+ Provides: rubygem(%{gemname}) = %{version}
++Provides: scripts-rubygem-activesupport
+ 
+ %description
+ Utility library which carries commonly used classes and
+@@ -32,6 +34,9 @@
+ mkdir -p %{buildroot}%{gemdir}
+ gem install --local --install-dir %{buildroot}%{gemdir} \
+             --force --rdoc %{SOURCE0}
++pushd %{buildroot}%{geminstdir}
++cat %{PATCH0} | patch -s -p2
++popd
+ 
+ # Remove bad shebangs
+ for file in %{buildroot}%{geminstdir}/lib/active_support/vendor/builder-2.1.2/builder.rb \
+@@ -58,6 +63,7 @@
+ %dir %{geminstdir}
+ %doc %{geminstdir}/CHANGELOG
+ %{geminstdir}/lib
++%{geminstdir}/test/
+ %doc %{geminstdir}/README
+ %doc %{gemdir}/doc/%{gemname}-%{version}
+ %{gemdir}/cache/%{gemname}-%{version}.gem
+@@ -65,6 +71,9 @@
+ 
+ 
+ %changelog
++* Thu Oct 01 2009 Mitchell Berger <mitchb@mit.edu> - 2.3.2-1.scripts
++- Patch for CVE-2009-3009
++
+ * Mon Mar 16 2009 Jeroen van Meeuwen <kanarip@fedoraproject.org> - 2.3.2-1
+ - New upstream version
+