[Pkg-puppet-devel] Bug#774643: verify_active_connections is not present in ruby-activerecord 4.1.8

intrigeri intrigeri at debian.org
Fri Feb 27 13:33:53 UTC 2015


Hi,

intrigeri wrote (09 Feb 2015 15:11:38 GMT) :
> Another lead might be to reintroduce ruby-activerecord-3.x into
> Jessie(!). Apparently it also involves getting a compatibility patch
> back into ruby-arel, that was removed in the 5.0.1.20140414130214-1
> upload. Before I test this: is there any upstream security support for
> activerecord 3.x these days?

The way I understand upstream's maintenance [1] and security [2]
policies, and how things went in the past: 3.x currently gets fixes
for "Severe security issues" only, but once Rails 5.x is out (Fall,
2015) this will stop.

So, I'm afraid this (admittedly crazy) option must be discarded
for Jessie.

[1] http://guides.rubyonrails.org/maintenance_policy.html
[2] http://rubyonrails.org/security/

Cheers,
--
intrigeri



More information about the Pkg-puppet-devel mailing list