Vote #81852
完了Update Rails to 5.2.6.3
開始日:
2022/05/09
期日:
進捗率:
0%
予定工数:
Redmineorg_URL:
category_id:
44
version_id:
174
issue_org_id:
36757
author_id:
88801
assigned_to_id:
332
comments:
3
status_id:
5
tracker_id:
3
plus1:
0
affected_version:
closed_on:
affected_version_id:
説明
A new security release is available, and we should upgrade to Rails 5.2.6.3.
https://rubyonrails.org/2022/3/8/Rails-7-0-2-3-6-1-4-7-6-0-4-7-and-5-2-6-3-have-been-released
This release addresses CVE-2022-21831. A detailed explanation is available here: https://discuss.rubyonrails.org/t/cve-2022-21831-possible-code-injection-vulnerability-in-rails-active-storage/80199
journals
Thanks!
We will do the update, but that component is not used in Redmine.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Updated Rails. Thank you for reporting this.
--------------------------------------------------------------------------------
いいね!0