Changelog for ruby2.4-rubygem-activesupport-4_2-4.2.2-1.152.x86_64.rpm :

* Tue Jan 26 2016 jmassaguerplaAATTsuse.com- fix bnc#963334 - CVE-2016-0753: rubygem-activemodel, rubygem-activesupport, rubygem-activerecord: Input Validation Circumvention CVE-2016-0753.patch: contains the fix
* Tue Jan 26 2016 jmassaguerplaAATTsuse.com- fix CVE-2015-7576: rubygem-actionpack, rubygem-activesupport: Timing attack vulnerability in basic authentication in Action Controller CVE-2015-7576.patch: contains the fix (bsc#963329)
* Wed Jul 01 2015 jmassaguerplaAATTsuse.com- updated to version 4.2.2:
* Fix XSS vulnerability in ActiveSupport::JSON.encode method. CVE-2015-3226 (bnc#934799).
* Fix denial of service vulnerability in the XML processing. CVE-2015-3227 (bnc#934800).
* Mon Mar 23 2015 cooloAATTsuse.com- updated to version 4.2.1
* Fixed a problem where String#truncate_words would get stuck with a complex string.
* Henrik Nygren
*
* Fixed a roundtrip problem with AS::SafeBuffer where primitive-like strings will be dumped as primitives: Before: YAML.load ActiveSupport::SafeBuffer.new(\"Hello\").to_yaml # => \"Hello\" YAML.load ActiveSupport::SafeBuffer.new(\"true\").to_yaml # => true YAML.load ActiveSupport::SafeBuffer.new(\"false\").to_yaml # => false YAML.load ActiveSupport::SafeBuffer.new(\"1\").to_yaml # => 1 YAML.load ActiveSupport::SafeBuffer.new(\"1.1\").to_yaml # => 1.1 After: YAML.load ActiveSupport::SafeBuffer.new(\"Hello\").to_yaml # => \"Hello\" YAML.load ActiveSupport::SafeBuffer.new(\"true\").to_yaml # => \"true\" YAML.load ActiveSupport::SafeBuffer.new(\"false\").to_yaml # => \"false\" YAML.load ActiveSupport::SafeBuffer.new(\"1\").to_yaml # => \"1\" YAML.load ActiveSupport::SafeBuffer.new(\"1.1\").to_yaml # => \"1.1\"
* Godfrey Chan
*
* Replace fixed `:en` with `I18n.default_locale` in `Duration#inspect`.
* Dominik Masur
*
* Add missing time zone definitions for Russian Federation and sync them with `zone.tab` file from tzdata version 2014j (latest).
* Andrey Novikov
*
* Mon Jan 19 2015 dmuellerAATTsuse.com- update to 4.1.9:
* `Method` objects now report themselves as not `duplicable?`. This allows hashes and arrays containing `Method` objects to be `deep_dup`ed.
* Mon Nov 10 2014 tboergerAATTsuse.com- To get rails 4 running on SLE 11 i have switched the rb_build_versions definition to rub21 as it is activated within devel:languages:ruby. That way we can get running rails 4 on SLE 11 too.
* Tue Oct 14 2014 cooloAATTsuse.com- updated to version 4.1.6
* Fix DateTime comparison with DateTime::Infinity object.
* Fixed a compatibility issue with the `Oj` gem when cherry-picking the file `active_support/core_ext/object/json` without requiring `active_support/json`. Fixes #16131.
* Make Dependencies pass a name to NameError error.
* Fixed precision error in NumberHelper when using Rationals. before: ActiveSupport::NumberHelper.number_to_rounded Rational(1000, 3), precision: 2 [#]=> \"330.00\" after: ActiveSupport::NumberHelper.number_to_rounded Rational(1000, 3), precision: 2 [#]=> \"333.33\" See #15379.
* Wed Jul 23 2014 mrueckertAATTsuse.com- - initial package