Rails Security Issue and Fix

Posted 08/09/2006 by dnaffis 0 CommentsAdd Your Comment

If you’re running Ruby on Rails you should do an update immediately to get the fix for a newly found security issue.

Here’s some more info about it.

To upgrade run: 
gem install rails --include-dependencies

Rails 1.0 and earlier versions as well as Rails 1.1.3 aren’t affected.

If you want to freeze your particular version of Rails for an app go to the root directory of that app and run:

rake rails:freeze:gems

Note: The last release of rails (1.1.5) only solves part of the security problem. Update rails today to get 1.1.6.

Tagged Under:

Leave a Reply

Dave is the cofounder of Intridea and leads Intridea's product development efforts.

Before Intridea, Dave spent years at both AOL and IMAKE and received a Masters in Systems Engineering from the University of Virginia.