Actions
Defect #12778
closed
Upgrade to Rails 3.2.11
Status:
Closed
Priority:
Urgent
Assignee:
-
Category:
Rails support
Target version:
-
Start date:
Due date:
% Done:
0%
Estimated time:
Resolution:
Duplicate
Affected version:
Description
There's a severe vulnerability in all Rails versions. I think it's really important to upgrade Redmine 2.2.0 to Rails 3.2.11 (or push out 2.2.1 soon). I didn't yet check how much Redmine is affected, but the risk seems to be high.
As a quick fix users could upgrade to Rails 3.2.11 manually by changing the version in their Gemfile and do a "bundle update".
An upgrade is also important for the older 2.1.x and 1.4.x versions.
Updated by 
Updated by
Actions