File rubygem-activejob-4_2.changes of Package rubygem-activejob-4_2

Overview Repositories Revisions Requests Users Attributes Meta

File rubygem-activejob-4_2.changes of Package rubygem-activejob-4_2

-------------------------------------------------------------------
Mon Dec  3 05:56:30 UTC 2018 - mschnitzer@suse.com

- Add CVE-2018-16476.patch to address a security vulnerability
  (CVE-2018-16476, bsc#1117632)

Carefully crafted user input can cause Active Job to deserialize
  it using GlobalId and allow an attacker to have access to
  information that they should not have.

Vulnerable code will look something like this:

MyJob.perform_later(user_input)

All users running an affected release should either upgrade
  or use one of the workarounds immediately.

- Add series file for better patch handling

-------------------------------------------------------------------
Mon Aug 28 16:11:27 UTC 2017 - rsalevsky@suse.com

- update to version 4.2.9 (bsc#1055962)
  ## Rails 4.2.9 (June 26, 2017) ##
  *   No changes.

## Rails 4.2.8 (February 21, 2017) ##
  *   No changes.

## Rails 4.2.7 (July 12, 2016) ##
  *   No changes.

## Rails 4.2.6 (March 07, 2016) ##
  *   No changes.

## Rails 4.2.5.2 (February 26, 2016) ##
  *   No changes.

## Rails 4.2.5.1 (January 25, 2015) ##
  *   No changes.

## Rails 4.2.5 (November 12, 2015) ##
  *   No changes.

## Rails 4.2.4 (August 24, 2015) ##
  *   Include I18n.locale into job serialization/deserialization and use it around
      `perform`.

Fixes #20799.

*Johannes Opper*

## Rails 4.2.3 (June 25, 2015) ##
  *   `assert_enqueued_jobs` and `assert_performed_jobs` in block form use the
      given number as expected value. This makes the error message much easier to
      understand.

*y-yagi*

-------------------------------------------------------------------
Fri Jul  3 10:23:24 UTC 2015 - jmassaguerpla@suse.com

- update to version 4.2.2, no changes
  (updated to match activesupport version)
  (bnc#934799 and bnc#934800).

-------------------------------------------------------------------
Sun Mar 22 09:55:24 UTC 2015 - coolo@suse.com

- updated to version 4.2.1
   Allow keyword arguments to be used with Active Job.
     Fixes #18741.

-------------------------------------------------------------------
Wed Jan 28 12:46:44 UTC 2015 - adrian@suse.de

- initial package

Places

File rubygem-activejob-4_2.changes of Package rubygem-activejob-4_2

Places