%{?scl:%scl_package rubygem-%{gem_name}} %{!?scl:%global pkg_name %{name}} # Generated from activerecord-1.15.5.gem by gem2rpm -*- rpm-spec -*- %global gem_name activerecord %global rubyabi 1.9.1 Summary: Implements the ActiveRecord pattern for ORM Name: %{?scl_prefix}rubygem-%{gem_name} Epoch: 1 Version: 3.2.8 Release: 11%{?dist} Group: Development/Languages License: MIT URL: http://www.rubyonrails.org Source0: http://rubygems.org/downloads/activerecord-%{version}.gem # git clone http://github.com/rails/rails.git # cd rails/activerecord/ # git checkout v3.2.8 # tar czvf activerecord-3.2.8-tests.tgz test/ Source1: activerecord-%{version}-tests.tgz # CVE-2012-6496 # https://bugzilla.redhat.com/show_bug.cgi?id=891470 # https://bugzilla.redhat.com/show_bug.cgi?id=891471 Patch0: rubygem-activerecord-3.2.10-CVE-2012-6496-dynamic_finder_injection.patch # CVE-2013-0155 # https://bugzilla.redhat.com/show_bug.cgi?id=892866 Patch1: rubygem-activerecord-3.2.11-CVE-2013-0155-null_array_param.patch # CVE-2013-1854 # https://bugzilla.redhat.com/show_bug.cgi?id=921329 Patch2: rubygem-activerecord-3.2.13-CVE-2013-1854-attribute_symbols.patch Patch3: rubygem-activerecord-3.2.13-CVE-2013-1854-attribute_symbols-test.patch # Bug in 3.2.8 activerecords prevents to do some SQL squeries with PostgreSQL # https://bugzilla.redhat.com/show_bug.cgi?id=969448 Patch4: rubygem-activerecord-3.2.9-rhbz963295-nulls-first-last.patch # CVE-2014-3482 # https://bugzilla.redhat.com/show_bug.cgi?id=1115334 Patch5: rubygem-activerecord-3.2.19-CVE-2014-3482-bit-string.patch Patch6: rubygem-activerecord-3.2.19-CVE-2014-3482-bit-string-test.patch # Fix CVE-2015-7577 Nested attributes rejection proc bypass # https://bugzilla.redhat.com/show_bug.cgi?id=1301957 Patch7: rubygem-activerecord-3.2.22.1-CVE-2015-7577-fix-nested-attributes-rejection-proc-bypass.patch Patch8: rubygem-activerecord-3.2.22.1-CVE-2015-7577-fix-nested-attributes-rejection-proc-bypass-tests.patch Requires: %{?scl_prefix}ruby(abi) = %{rubyabi} Requires: %{?scl_prefix}ruby(rubygems) Requires: %{?scl_prefix}rubygem(activesupport) = %{version} Requires: %{?scl_prefix}rubygem(activemodel) = %{version} Requires: %{?scl_prefix}rubygem(arel) Requires: %{?scl_prefix}rubygem(tzinfo) >= 0.3.23 BuildRequires: %{?scl_prefix}rubygems-devel BuildRequires: %{?scl_prefix}rubygem(bcrypt-ruby) BuildRequires: %{?scl_prefix}rubygem(activesupport) = %{version} BuildRequires: %{?scl_prefix}rubygem(activemodel) = %{version} BuildRequires: %{?scl_prefix}rubygem(sqlite3) BuildRequires: %{?scl_prefix}rubygem(erubis) BuildRequires: %{?scl_prefix}rubygem(json) BuildRequires: %{?scl_prefix}rubygem(mocha) BuildRequires: %{?scl_prefix}rubygem(arel) BuildRequires: %{?scl_prefix}rubygem(tzinfo) >= 0.3.23 BuildRequires: %{?scl_prefix}rubygem(minitest) BuildArch: noarch Provides: %{?scl_prefix}rubygem(%{gem_name}) = %{version} %description Implements the ActiveRecord pattern (Fowler, PoEAA) for ORM. It ties database tables and classes together for business objects, like Customer or Subscription, that can find, save, and destroy themselves without resorting to manual SQL. %package doc Summary: Documentation for %{pkg_name} Group: Documentation Requires: %{?scl_prefix}%{pkg_name} = %{epoch}:%{version}-%{release} BuildArch: noarch %description doc Documentation for %{pkg_name} %prep %setup -n %{pkg_name}-%{version} -q -c -T mkdir -p .%{gem_dir} %{?scl:scl enable %{scl} "} gem install --local --install-dir .%{gem_dir} \ --force --rdoc %{SOURCE0} %{?scl:"} pushd .%{gem_instdir} %patch0 -p2 %patch1 -p2 %patch2 -p2 %patch4 -p2 %patch5 -p2 %patch7 -p2 popd %build %install mkdir -p %{buildroot}%{gem_dir} cp -a .%{gem_dir}/* %{buildroot}%{gem_dir} %check pushd .%{gem_instdir} tar xzvf %{SOURCE1} cat %{PATCH3} | patch -p2 cat %{PATCH6} | patch -p2 cat %{PATCH8} | patch -p2 # load_path is not available, remove its require. sed -i '1,2d' test/cases/helper.rb %{?scl:scl enable %scl - << \FOE} ruby -I.:test:lib << EOF test_files = Dir.glob( "test/cases/**/*_test.rb" ) test_files.reject! { |x| x =~ %r|/adapters/| } # Only test sqlite3 backend test_files += Dir.glob("test/cases/adapters/sqlite3/*_test.rb") # To prevent a circular dependency w/ actionpack. test_files.delete('test/cases/session_store/session_test.rb') # Test dependes on mysql adapter # https://github.com/rails/rails/issues/7103 test_files.delete('test/cases/connection_specification/resolver_test.rb') test_files.each { |f| require f } EOF %{?scl:FOE} popd %files %dir %{gem_instdir} %{gem_libdir} %doc %{gem_instdir}/MIT-LICENSE %exclude %{gem_cache} %{gem_spec} %files doc %doc %{gem_docdir} %doc %{gem_instdir}/CHANGELOG.md %doc %{gem_instdir}/README.rdoc %doc %{gem_instdir}/examples %changelog * Tue Feb 23 2016 Vít Ondruch - 1:3.2.8-11 - Nested attributes rejection proc bypass Resolves: rhbz#1306282 * Tue Nov 04 2014 Josef Stribny - 1:3.2.8-10 - Make the patch #5 apply cleanly - Related: rhbz#1115334 * Thu Jul 03 2014 Josef Stribny - 1:3.2.8-9 - Fix for CVE-2014-3482 - Resolves: rhbz#1115334 * Wed Jun 12 2013 Vít Ondruch - 1:3.2.8-8 - Make the patch4 cleanly apply. - Related: rhbz#969486 * Fri May 31 2013 Lukas Zapletal - 1:3.2.8-7 - RHBZ#969448 - NULLS FIRST/LAST SQL statement fix for PostgreSQL - Resolves: rhbz#969486 - Add BR: rubygem(json), since older version of RDoc does not pull it in. * Thu Mar 21 2013 Vít Ondruch - 1:3.2.8-6 - Forget to apply the CVE-2013-1854 patch. Fixing it now. * Fri Mar 15 2013 Vít Ondruch - 1:3.2.8-4 - Fix for CVE-2013-1854. * Mon Jan 14 2013 Bohuslav Kabrda - 1:3.2.8-3 - Fix for CVE-2013-0155. * Mon Jan 07 2013 Bohuslav Kabrda - 1:3.2.8-2 - Fix for CVE-2012-6496. * Tue Sep 18 2012 Bohuslav Kabrda - 1:3.2.8-1 - Update to ActiveRecord 3.2.8. * Fri Jul 27 2012 Bohuslav Kabrda - 1:3.2.6-4 - Fixed the Require in -doc subpackage. * Wed Jul 25 2012 Bohuslav Kabrda - 1:3.2.6-3 - Imported from Fedora again. * Tue Jul 24 2012 Vít Ondruch - 1:3.2.6-2 - Fixed missing epoch in -doc subpackage. * Thu Jul 19 2012 Vít Ondruch - 1:3.2.6-1 - Update to ActiveRecord 3.2.6. * Fri Jun 15 2012 Vít Ondruch - 1:3.0.15-1 - Update to ActiveRecord 3.0.15. * Fri Jun 01 2012 Vít Ondruch - 1:3.0.13-1 - Update to ActiveRecord 3.0.13. * Tue Jan 31 2012 Bohuslav Kabrda - 1:3.0.11-1 - Rebuilt for Ruby 1.9.3. - Update to ActionRecord 3.0.11 * Sat Jan 14 2012 Fedora Release Engineering - 1:3.0.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Mon Aug 22 2011 Vít Ondruch - 1:3.0.10-1 - Update to ActiveRecord 3.0.10 * Mon Jul 04 2011 Vít Ondruch - 1:3.0.9-1 - Update to ActiveRecord 3.0.9 * Fri Mar 25 2011 Vít Ondruch - 1:3.0.5-1 - Updated to ActiveRecord 3.0.5 * Wed Feb 09 2011 Fedora Release Engineering - 1:3.0.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Mon Jan 10 2011 Mohammed Morsi - 1:3.0.3-1 - Update to rails 3 * Wed Sep 08 2010 Mohammed Morsi - 1:2.3.8-4 - Updated postgres fix to resolve security issue * Mon Aug 16 2010 Mohammed Morsi - 1:2.3.8-3 - Included postgres fix (patch also pushed upstream, see rails issue tracker) * Thu Aug 12 2010 Mohammed Morsi - 1:2.3.8-2 - Updated patch0 to correctly parse sqlite3 version * Wed Aug 04 2010 Mohammed Morsi - 1:2.3.8-1 - Update to 2.3.8 * Thu Jan 28 2010 Mamoru Tasaka - 1:2.3.5-1 - Update to 2.3.5 * Wed Oct 7 2009 David Lutterkort - 1:2.3.4-2 - Bump Epoch to ensure upgrade path from F-11 * Fri Sep 18 2009 Mamoru Tasaka - 2.3.4-1 - Update to 2.3.4 - Enable check * Sun Jul 26 2009 Jeroen van Meeuwen - 2.3.3-1 - New upstream version * Mon Mar 16 2009 Jeroen van Meeuwen - 2.3.2-1 - New upstream version * Wed Feb 25 2009 Fedora Release Engineering - 2.2.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Mon Nov 24 2008 Jeroen van Meeuwen - 2.2.2-1 - New upstream version - Fixed rpmlint errors zero-length files and script-without-shebang * Thu Nov 20 2008 David Lutterkort - 2.1.1-2 - Do not mark lib/ as doc * Tue Sep 16 2008 David Lutterkort - 2.1.1-1 - New version (fixes CVE-2008-4094) * Thu Jul 31 2008 Michael Stahnke - 2.1.0-1 - New Upstream * Tue Apr 8 2008 David Lutterkort - 2.0.2-2 - Fix dependency * Mon Apr 07 2008 David Lutterkort - 2.0.2-1 - New version * Mon Dec 10 2007 David Lutterkort - 2.0.1-1 - New version * Thu Nov 29 2007 David Lutterkort - 1.15.6-1 - New version * Tue Nov 14 2007 David Lutterkort - 1.15.5-2 - Fix buildroot - Properly mark docs in geminstdir * Tue Oct 30 2007 David Lutterkort - 1.15.5-1 - Initial package