aboutsummaryrefslogtreecommitdiffstats
path: root/activerecord
diff options
context:
space:
mode:
authorAaron Patterson <aaron.patterson@gmail.com>2012-05-31 10:23:39 -0700
committerAaron Patterson <aaron.patterson@gmail.com>2012-05-31 10:23:39 -0700
commit44aca7b29502995b3e2ed94f7288646f134ff612 (patch)
treee19a96ec4624baa32064ff1807a8ffe3a083b96e /activerecord
parent71827489e90f91da18ebac68c2d9e10379220a43 (diff)
downloadrails-44aca7b29502995b3e2ed94f7288646f134ff612.tar.gz
rails-44aca7b29502995b3e2ed94f7288646f134ff612.tar.bz2
rails-44aca7b29502995b3e2ed94f7288646f134ff612.zip
adding security notifications to CHANGELOGs
Diffstat (limited to 'activerecord')
-rw-r--r--activerecord/CHANGELOG.md3
1 files changed, 3 insertions, 0 deletions
diff --git a/activerecord/CHANGELOG.md b/activerecord/CHANGELOG.md
index 4c81698517..6767fb74f5 100644
--- a/activerecord/CHANGELOG.md
+++ b/activerecord/CHANGELOG.md
@@ -13,6 +13,9 @@
* Fix #5667. Preloading should ignore scoping.
+* Predicate builder should not recurse for determining where columns.
+ Thanks to Ben Murphy for reporting this! CVE-2012-2661
+
## Rails 3.2.3 (March 30, 2012) ##
* Added find_or_create_by_{attribute}! dynamic method. *Andrew White*