6 ms·
Shortly followed by two others: https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/KtmwSbEpzrU https://groups.google.com/forum/?fromgroup
by calinet6 14y ago
Shortly followed by two others:
https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/KtmwSbEpzrU https://groups.google.com/forum/?fromgroups=#!topic/rubyonra... (Rails 2.3 and 3.0)
https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/4_YvCpLzL58 https://groups.google.com/forum/?fromgroups=#!topic/rubyonra... (JSON library)
And in a short followup:
"To be clear, updating Rails doesn't necessarily mean the JSON gem will be updated. Please ensure that you are running JSON version 1.7.7, 1.6.8, or 1.5.5. You can do this by adding the dependency to your Gemfile." -- Aaron Patterson
- chaz 14y agoAlso a good time to remind people to subscribe to the security mailing list: https://groups.google.com/forum/#!forum/rubyonrails-security https://groups.google.com/forum/#!forum/rubyonrails-security
- zwily 14y agoWe have new emails to rubyonrails-security triggering PagerDuty alarms as well.
- tenderlove 14y agoOuch. Sorry about that. :-(
- zwily 14y agoHeh, it's okay. We just want to make sure we can patch right away. Your 5 emails at lunchtime today were fun. :)
- patio11 14y agoI was considering putting up a one page app to SMS people when new patches dropped but this is not a good month for me to be adding more Rails apps to my stable...