3 ms·
The release text is not that clear. Is that a new big security issue?
by madewulf 14y ago
The release text is not that clear. Is that a new big security issue?
- Xylakant 14y agoThese are new security issues that are mostly related to the latest yaml problems. The issues are explained in detail in the linked CVE. One of the issues affects only rails < 2.3.17, but the second is critical enough to warrant immediate updates unless you're sure you're safe. You should also update your JSON gem.
- breckenedge 14y agoThe CVEs go into more detail. There's a way to circumvent attr_protected.