Change log for ruby-activerecord-3.2 package in Ubuntu

ruby-activerecord-3.2 (3.2.16-1) unstable; urgency=high


  * New upstream version 3.2.16
  * Update debian/control to rails release 3.2.16

 -- Ondřej Surý <email address hidden>  Wed, 04 Dec 2013 17:37:19 +0100

Available diffs

• diff from 3.2.13-4 to 3.2.16-1 (11.6 KiB)

ruby-activerecord-3.2 (3.2.13-4) unstable; urgency=low


  * Upload to unstable.
  * Remove all unneeded ruby/rails build dependencies, and drop
    ${shlib:Depends}.

 -- Ondřej Surý <email address hidden>  Thu, 23 May 2013 10:55:47 +0200

Available diffs

• diff from 3.2.6-5 to 3.2.13-4 (138.7 KiB)

ruby-activerecord-3.2 (3.2.6-5) unstable; urgency=high


  * Bump build dependency on gem2deb to >- 0.3.0~ in debian/control.in
  * [CVE-2013-1854]: Fix symbol DoS vulnerability in Active Record

 -- Ondřej Surý <email address hidden>  Tue, 19 Mar 2013 09:36:39 +0100

Available diffs

• diff from 3.2.6-4 to 3.2.6-5 (1.1 KiB)

ruby-activerecord-3.2 (3.2.6-2ubuntu0.1) quantal-security; urgency=low

  * SECURITY UPDATE: Unsafe Query Generation Risk in Ruby on Rails
    (LP: #1100188)
    - debian/patches/CVE-2013-0155: Strip nils from collections on JSON and
      XML posts. Based on upstream patch.
    - CVE-2013-0155
 -- Christian Kuersteiner <email address hidden>   Wed, 16 Jan 2013 16:14:08 +0700

Available diffs

• diff from 3.2.6-2 (in Debian) to 3.2.6-2ubuntu0.1 (1.3 KiB)

ruby-activerecord-3.2 (3.2.6-4) unstable; urgency=high


  * debian/patches/CVE-2013-0155.patch: fix Unsafe Query Generation Risk
    [CVE-2013-0155] (Closes: #697744).

 -- Antonio Terceiro <email address hidden>  Wed, 09 Jan 2013 18:18:07 -0300

Available diffs

• diff from 3.2.6-3 to 3.2.6-4 (943 bytes)

ruby-activerecord-3.2 (3.2.6-3) unstable; urgency=high


  * debian/patches/3-2-dynamic_finder_injection.patch: fix SQL injection
    vulnerability (CVE-2012-5664).

 -- Antonio Terceiro <email address hidden>  Thu, 03 Jan 2013 11:21:18 -0300

Available diffs

• diff from 3.2.6-2 to 3.2.6-3 (1.2 KiB)

ruby-activerecord-3.2 (3.2.6-2) unstable; urgency=low


  * Bump build dependency on gem2deb to >= 0.3.0~

 -- Antonio Terceiro <email address hidden>  Sun, 24 Jun 2012 18:52:10 -0300

Available diffs

• diff from 3.2.6-1 to 3.2.6-2 (513 bytes)

ruby-activerecord-3.2 (3.2.6-1) unstable; urgency=low


  * New upstream release. Fixes the following security problems:
    + CVE-2012-2695
    + CVE-2012-2660 (Closes: #675429)
    + CVE-2012-2661 (Closes: #675396)
  * debian/control:
    + Add myself to Uploaders:
    + Conflicty with ruby-activerecord-2.3
    + Review short description
  * debian/patches/Remove_rubygems_dependency.patch: do not require database
    adapters to be installed via Rubygems.

 -- Antonio Terceiro <email address hidden>  Sat, 16 Jun 2012 20:58:15 -0300

Available diffs

• diff from 3.2.3-3 to 3.2.6-1 (10.7 KiB)

ruby-activerecord-3.2 (3.2.3-3) unstable; urgency=low


  * Add Conflicts with ruby-activerecord-2.3 (Closes: #673741, #673578)

 -- Ondřej Surý <email address hidden>  Wed, 23 May 2012 13:10:42 +0200