Rails 5.0.0.1, 4.2.7.1, and 3.2.22.3 have been released! Hi everyone! Rails 5.0.0.1, 4.2.7.1, and 3.2.22.3 have been released! These release contain important security fixes, so please upgrade when you can. Versions 5.0.0.1, 4.2.7.1, and 3.2.22.3 contain a fix for CVE-2016-6316 which you can read about here. Version 4.2.7.1 also contains CVE-2016-6317 which you can read about here. To ease upgradi
Rails 4.2.5.2, 4.1.14.2 and 3.2.22.2 have been released! Hello everyone and happy Monday! Rails 4.2.5.2, 4.1.14.2, and 3.2.22.2 have been released! These contain the following important security fixes, and it is recommended that users upgrade as soon as possible: CVE-2016-2097 Possible Information Leak Vulnerability in Action View CVE-2016-2098 Possible remote code execution vulnerability in Actio
Rails 5.0.0.beta1.1, 4.2.5.1, 4.1.14.1, 3.2.22.1, and rails-html-sanitizer 1.0.3 have been released! Hello everyone and happy Monday! Rails 5.0.0.beta1.1, 4.2.5.1, 4.1.14.1, and 3.2.22.1 have been released! These contain the following important security fixes, and it is recommended that users upgrade as soon as possible: CVE-2015-7576 Timing attack vulnerability in basic authentication in Action C
Rails 3.2.22, 4.1.11 and 4.2.2 have been released and more Hi everyone! Rails 3.2.22, 4.1.11 and 4.2.2 have been released, along with web console and jquery-rails plugins and Rack 1.5.4 and 1.6.2. These releases contain security fixes, so please upgrade as soon as possible! The security fixes for 4.1.11 and 4.2.2 are: CVE-2015-3226 CVE-2015-3227 In order to make upgrading as smooth as possible, we
Hello everyone!!! It’s that time again. I would like to announce that Rails 3.2.21, 4.0.12, and 4.1.8 have been released. These releases contain a security fix where the existence of arbitrary files on the file system can be leaked, but the contents of the file will not be leaked. The issue generally only impacts people who are using Rails to serve static assets, and will generally not impact peop
Rails 3.2.20, 4.0.11, 4.1.7, and 4.2.0.beta3 have been released Hello everyone!!! It’s that time again. I would like to announce that Rails 3.2.20, 4.0.11, 4.1.7, and 4.2.0.beta3 have been released. These releases contain a security fix where the existence of arbitrary files on the file system can be leaked, but the contents of the file will not be leaked. The issue generally only impacts people w
Hi everyone! Rails 3.2.19, 4.0.7 and 4.1.3 have been released! These three releases contain important security fixes, so please upgrade as soon as possible! In order to make upgrading as smooth as possible, we’ve only included commits directly related to each security issue. The security fix for 3.2.19 is: CVE-2014-3482 The security fix for 4.0.7 and 4.1.3 is: CVE-2014-3483 The commits for 3.2.19
Hi everyone! Rails 3.2.18, 4.0.5 and 4.1.1 have been released! These three releases contain important security fix, so please upgrade as soon as possible! In order to make upgrading as smooth as possible, we’ve only included commits directly related to each security issue. The security fixes is: CVE-2014-0130 The commits for 3.2.18 can be found here, the commits for 4.0.5 can be found here, and th
Rails 3.2.17, 4.0.3 and 4.1.0.beta2 have been released! Hi everyone! Rails 3.2.17, 4.0.3 and 4.1.0.beta2 have been released! These three releases contain important security fixes, so please upgrade as soon as possible! In order to make upgrading as smooth as possible, we’ve only included commits directly related to each security issue. The security fixes in 3.2.17 are: CVE-2014-0081 CVE-2014-0082
Rails 4.0.0が出ていたので、3.2.12で動かしているウェブアプリ（このブログ）を4.0.0にアップグレードしてみることにしました。 Rails 4.0: Final version released! http://weblog.rubyonrails.org/2013/6/25/Rails-4-0-final/ (1) GemfileのRailsのバージョンを4.0.0にする coffee-rails、sass-railsも4.0.0にしました。 古いrailtiesに依存していてbundle updateが動かないことがあるためです。 (2) 以下のコマンドを実施。 以下、rake rails:updateの作業ログです。 boot.rbは上書き routes.rbはスキップ application.rb上書き（このアプリに関してはtime_zoneを指定していただけだった
Hi everyone, I am happy to announce that Rails 3.2.15 has been released. This is a bug fix release and includes 56 commits. This release also contains one security fix that you can read about here. Users are encouraged to upgrade as soon as possible. CHANGES since 3.2.14 To view the changes for each gem, please read the changelogs on GitHub: Action Mailer CHANGELOG Action Pack CHANGELOG Active Mod
Hi everyone, I am happy to announce that Rails 3.2.14 has been released. This is a bug fix release and includes more than 150 commits. I also want to announce that the next 3.2.x release, 3.2.15, will be the last bug fix release of this family. After it we will only release security fixes. So, if you have issues on 3.2.x that you think should be included on 3.2.15, let us know thought the GitHub i
Good news everyone! Rails version 3.2.7 has been released. This version contains an important security fix, please upgrade immediately. The security fix impacts people using digest authentication from Action Pack. You can read more about the problem here. Thank you to Charlie Somerville for reporting the problem and sending a patch. The rest of the changes can be found in the CHANGELOG file for ea
Good news everyone! Rails version 3.2.5 has been released. This version of Rails is a less broken version of 3.2.4! What happened with 3.2.4? A regression was reported in the release candidate. I reverted that regression without releasing another release candidate for testing. This release fixes the original regression along with the error made during reverting. CHANGES This release only contains
Good news everyone! Rails version 3.2.4 has been released. This release of Rails contains two important security fixes: CVE-2012-2660 Ruby on Rails Active Record Unsafe Query Generation Risk CVE-2012-2661 Ruby on Rails Active Record SQL Injection Vulnerability It is suggested that all users upgrade immediately. For more information about these issues, please see the annoumcenents on the rubyonrail
[SEC] [ANN] Rails 3.2.13, 3.1.12, and 2.3.18 have been released! Hi everyone! Rails versions 3.2.13, 3.1.12, and 2.3.18 have been released. These releases contain important security fixes. It is recommended users upgrade as soon as possible. Please check out these links for the security fixes: CVE-2013-1854 Symbol DoS vulnerability in Active Record CVE-2013-1855 XSS vulnerability in sanitize_css i
[SEC][ANN] Rails 3.2.12, 3.1.11, and 2.3.17 have been released! Hi everybody. I’d like to announce that Rails 3.2.12, 3.1.11, and 2.3.17 have been released. 3.2.12 and 3.1.11 contain one security fix, and 2.3.17 contains two security fixes. It is recommended that you update immediately. You can read about the security fixes by following these links: CVE-2013-0276 CVE-2013-0277 Please note that tod
Hey everyone! I am pumped to announce that Rails 3.2.13.rc1 has been released! If no regressions are found I will release 3.2.13 final in two weeks, on March 13, 2013. If you find one, please Open an Issue on GitHub so that I can fix it before the final release. This is a bugfix release, with 287 commits. There is one big thing that is technically a fix but is sort of a feature: Ruby 2.0 support.
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く