[DRE-commits] [SCM] ruby-activerecord-2.3.git branch, master, updated. debian/2.3.14-4-3-gb2a02b7

Ondřej Surý ondrej at sury.org
Tue Feb 12 16:11:07 UTC 2013


The following commit has been merged in the master branch:
commit b2a02b766dd02f49757d04fdeb4d746641380670
Author: Ondřej Surý <ondrej at sury.org>
Date:   Tue Feb 12 17:05:09 2013 +0100

    prepare 2.3.14-5 release

diff --git a/debian/changelog b/debian/changelog
index 93e0b8d..fb22bc6 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+ruby-activerecord-2.3 (2.3.14-5) unstable; urgency=high
+
+  * Fix circumvention of attr_protected [CVE-2013-0276]
+  * Fix serialized Attributes YAML Vulnerability with Rails 2.3 and 3.0 [CVE-2013-0277]
+
+ -- Ondřej Surý <ondrej at debian.org>  Tue, 12 Feb 2013 17:04:53 +0100
+
 ruby-activerecord-2.3 (2.3.14-4) unstable; urgency=high
 
   * Team upload.

-- 
ruby-activerecord-2.3.git



More information about the Pkg-ruby-extras-commits mailing list