Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Upgrade ActionView due to security alert

#89

Upgrade ActionView due to http://seclists.org/oss-sec/2013/q4/400

Reported by Marnen Laibow-Koser · December 3rd, 2013 @ 10:03 PM

State: resolved
Milestone: none
Assigned to: Marnen Laibow-Koser Marnen Laibow-Koser

Activity

  1. Marnen Laibow-Koser
    Marnen Laibow-Koser
    • Tag changed from actionview, security, upgrade, urgent, v0.5.13 to actionpack, security, upgrade, urgent, v0.5.13

    Actually, the gem in question is actionpack. Looks like there's no Rails 3.0 gem release, so we have to apply the patch given in that alert (and upgrade to Rails 3.2 soon).

    December 3rd, 2013 @ 10:10 PM

  2. Marnen Laibow-Koser
    Marnen Laibow-Koser

    The 3-0-stable branch of Rails has the appropriate commit. Using that.

    December 3rd, 2013 @ 10:20 PM

  3. Marnen Laibow-Koser
    Marnen Laibow-Koser

    December 3rd, 2013 @ 10:43 PM

  4. Marnen Laibow-Koser
    Marnen Laibow-Koser
    • State changed from open to resolved

    Done. Will be in 0.5.13.

    December 3rd, 2013 @ 10:43 PM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.