Changelog for ruby3.3-rubygem-activerecord-5.2-5.2.8.1-1.35.i586.rpm :

* Thu Aug 04 2022 Stephan Kulow updated to version 5.2.8.1 see installed CHANGELOG.md [#]# Rails 5.2.8.1 (July 12, 2022) ##
* Change ActiveRecord::Coders::YAMLColumn default to safe_load This adds two new configuration options The configuration options are as follows:
* `config.active_storage.use_yaml_unsafe_load` When set to true, this configuration option tells Rails to use the old \"unsafe\" YAML loading strategy, maintaining the existing behavior but leaving the possible escalation vulnerability in place. Setting this option to true is
*not
* recommended, but can aid in upgrading.
* `config.active_record.yaml_column_permitted_classes` The \"safe YAML\" loading method does not allow all classes to be deserialized by default. This option allows you to specify classes deemed \"safe\" in your application. For example, if your application uses Symbol and Time in serialized data, you can add Symbol and Time to the allowed list as follows: ``` config.active_record.yaml_column_permitted_classes = [Symbol, Date, Time] ``` [CVE-2022-32224] [#]# Rails 5.2.8 (May 09, 2022) ##
* No changes.
* Thu Apr 28 2022 Stephan Kulow updated to version 5.2.7.1 see installed CHANGELOG.md [#]# Rails 5.2.7.1 (April 26, 2022) ##
* No changes. [#]# Rails 5.2.7 (March 10, 2022) ##
* No changes. [#]# Rails 5.2.6.3 (March 08, 2022) ##
* No changes.
* Tue Feb 15 2022 Stephan Kulow updated to version 5.2.6.2 see installed CHANGELOG.md [#]# Rails 5.2.6.2 (February 11, 2022) ##
* No changes. [#]# Rails 5.2.6.1 (February 11, 2022) ##
* No changes.
* Thu Jun 24 2021 Stephan Kulow updated to version 5.2.6 see installed CHANGELOG.md [#]# Rails 5.2.6 (May 05, 2021) ##
* No changes. [#]# Rails 5.2.5 (March 26, 2021) ##
* No changes. [#]# Rails 5.2.4.6 (May 05, 2021) ##
* No changes. [#]# Rails 5.2.4.5 (February 10, 2021) ##
* Fix possible DoS vector in PostgreSQL money type Carefully crafted input can cause a DoS via the regular expressions used for validating the money format in the PostgreSQL adapter. This patch fixes the regexp. Thanks to AATTdee-see from Hackerone for this patch! [CVE-2021-22880]
* Aaron Patterson
*
* Fri Sep 25 2020 Stephan Kulow updated to version 5.2.4.4 see installed CHANGELOG.md [#]# Rails 5.2.4.4 (September 09, 2020) ##
* No changes. [#]# Rails 5.2.4.3 (May 18, 2020) ##
* No changes.
* Thu May 07 2020 Stephan Kulow - updated to version 5.2.4.2 see installed CHANGELOG.md
* Fri Dec 20 2019 Marcus Rueckert - update to version 5.2.4.1 (CVE-2019-16782): https://weblog.rubyonrails.org/2019/12/18/Rails-5-2-4-1-has-been-released/
* Thu Nov 28 2019 Manuel Schnitzer - updated to version 5.2.4
* Fix circular `autosave: true` causes invalid records to be saved. Prior to the fix, when there was a circular series of `autosave: true` associations, the callback for a `has_many` association was run while another instance of the same callback on the same association hadn\'t finished running. When control returned to the first instance of the callback, the instance variable had changed, and subsequent associated records weren\'t saved correctly. Specifically, the ID field for the `belongs_to` corresponding to the `has_many` was `nil`. Fixes #28080.
* Larry Reid
*
* PostgreSQL: Fix GROUP BY with ORDER BY virtual count attribute. Fixes #36022.
* Ryuta Kamizono
*
* Fix sqlite3 collation parsing when using decimal columns.
* Martin R. Schuster
*
* Make ActiveRecord `ConnectionPool.connections` method thread-safe. Fixes #36465.
* Jeff Doering
*
* Assign all attributes before calling `build` to ensure the child record is visible in `before_add` and `after_add` callbacks for `has_many :through` associations. Fixes #33249.
* Ryan H. Kerr
*
* Fri Mar 29 2019 Stephan Kulow - updated to version 5.2.3 see installed CHANGELOG.md [#]# Rails 5.2.3 (March 27, 2019) ##
* Fix different `count` calculation when using `size` with manual `select` with DISTINCT. Fixes #35214.
* Juani Villarejo
*
* Fix prepared statements caching to be enabled even when query caching is enabled.
* Ryuta Kamizono
*
* Don\'t allow `where` with invalid value matches to nil values. Fixes #33624.
* Ryuta Kamizono
*
* Restore an ability that class level `update` without giving ids. Fixes #34743.
* Ryuta Kamizono
*
* Fix join table column quoting with SQLite.
* Gannon McGibbon
*
* Ensure that `delete_all` on collection proxy returns affected count.
* Ryuta Kamizono
*
* Reset scope after delete on collection association to clear stale offsets of removed records.
* Gannon McGibbon
*
* Thu Mar 14 2019 Marcus Rueckert - update to version 5.2.2.1: https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/ CVE-2019-5418 CVE-2019-5419 CVE-2019-5420