[LRUG] Serious Vulnerability in all versions of Rails. Upgrade now.

[Mark Burns]

This gives a useful breakdown of the details


http://blog.phusion.nl/2013/01/03/rails-sql-injection-vulnerability-hold-your-horses-here-are-the-facts/


On 9 January 2013 06:20, Matthew Rudy Jacobs <matthewrudyjacobs at gmail.com>wrote:

> I guess you all know.
>
> But for anyone who hasn't yet heard.
> All versions of rails need to be upgraded or patched.
>
>
> https://groups.google.com/forum/#!topic/rubyonrails-security/61bkgvnSGTQ/discussion
>
> _______________________________________________
> Chat mailing list
> Chat at lists.lrug.org
> http://lists.lrug.org/listinfo.cgi/chat-lrug.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lrug.org/pipermail/chat-lrug.org/attachments/20130109/89b30c4b/attachment-0003.html>