activerecord 3.0.18 → 3.0.19

checksums.yaml

@@ -0,0 +1,7 @@
+---
+!binary "U0hBMQ==":
+  metadata.gz: 70bc0a24109ec3a0d5679eb987cfa72ddbd83c0d
+  data.tar.gz: 545b569faa3cf5ffd5ff8a0426506b93fb7cb692
+!binary "U0hBNTEy":
+  metadata.gz: 67dc14b0e8bc77cf8a8353e47d6075d0e47adf8522c431d14e8c462190b62393d5aa2d63170548af1a8feb13eb8eb0f97188cf5e16b6ddc6e34d684ea7f4206f
+  data.tar.gz: 9f8f23cc5f12023c4703a237d591172f5293c8284c1f541cb72d8f592736c360e74a1f396b587d0b400e8e15aca18fae7714a0221207c49d2a57be8ef4e41a29

data/CHANGELOG

@@ -1,3 +1,7 @@
+## Rails 3.0.19
+
+*   Fix querying with an empty hash *Damien Mathieu* [CVE-2013-0155]
+
 ## Rails 3.0.18
 
 * CVE-2012-5664 ensure that options are never taken from the first parameter

data/lib/active_record/relation/predicate_builder.rb

@@ -11,7 +11,12 @@ module ActiveRecord
 
         if allow_table_name && value.is_a?(Hash)
           table = Arel::Table.new(column, :engine => @engine)
-          build_from_hash(value, table, false)
+
+          if value.empty?
+            '1 = 2'
+          else
+            build_from_hash(value, table, false)
+          end
         else
           column = column.to_s
 

data/lib/active_record/version.rb

@@ -2,7 +2,7 @@ module ActiveRecord
   module VERSION #:nodoc:
     MAJOR = 3
     MINOR = 0
-    TINY  = 18
+    TINY  = 19
     PRE   = nil
 
     STRING = [MAJOR, MINOR, TINY, PRE].compact.join('.')

metadata

@@ -1,78 +1,69 @@
 --- !ruby/object:Gem::Specification
 name: activerecord
 version: !ruby/object:Gem::Version
-  version: 3.0.18
-  prerelease: 
+  version: 3.0.19
 platform: ruby
 authors:
 - David Heinemeier Hansson
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2012-12-23 00:00:00.000000000 Z
+date: 2013-01-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
   requirement: !ruby/object:Gem::Requirement
-    none: false
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.0.18
+        version: 3.0.19
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
-    none: false
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.0.18
+        version: 3.0.19
 - !ruby/object:Gem::Dependency
   name: activemodel
   requirement: !ruby/object:Gem::Requirement
-    none: false
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.0.18
+        version: 3.0.19
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
-    none: false
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.0.18
+        version: 3.0.19
 - !ruby/object:Gem::Dependency
   name: arel
   requirement: !ruby/object:Gem::Requirement
-    none: false
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: 2.0.10
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
-    none: false
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: 2.0.10
 - !ruby/object:Gem::Dependency
   name: tzinfo
   requirement: !ruby/object:Gem::Requirement
-    none: false
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: 0.3.23
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
-    none: false
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: 0.3.23
 description: Databases on Rails. Build a persistent domain model by mapping database
@@ -180,31 +171,27 @@ files:
 - lib/rails/generators/active_record.rb
 homepage: http://www.rubyonrails.org
 licenses: []
+metadata: {}
 post_install_message: 
 rdoc_options:
-- --main
+- "--main"
 - README.rdoc
 require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
-  none: false
   requirements:
-  - - ! '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: 1.8.7
 required_rubygems_version: !ruby/object:Gem::Requirement
-  none: false
   requirements:
-  - - ! '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: '0'
-      segments:
-      - 0
-      hash: 3056249423653791357
 requirements: []
 rubyforge_project: activerecord
-rubygems_version: 1.8.24
+rubygems_version: 2.0.0.preview3
 signing_key: 
-specification_version: 3
+specification_version: 4
 summary: Object-relational mapper framework (part of Rails).
 test_files: []