Rails 2.3 not supported?
64 views
Skip to first unread message
Paul E. G. Lynch
Mar 1, 2012, 4:15:11 PM3/1/12
to Ruby on Rails: Talk
The security fix announcement today sent to the rubyonrails-security
group implied that Rails 2.3 is no longer supported. Is that the
case? Did I miss an announcement somewhere? Is there a list of
supported releases somewhere? (What was I supposed to be paying
attention to?) Thanks,
--Paul
group implied that Rails 2.3 is no longer supported. Is that the
case? Did I miss an announcement somewhere? Is there a list of
supported releases somewhere? (What was I supposed to be paying
attention to?) Thanks,
--Paul
Rob Olson
Mar 2, 2012, 2:52:03 PM3/2/12
to Ruby on Rails: Talk
I was surprised as well. The previous security issue in August 2011
that affected 2.3 received a fix and a new release. I also haven't
seen an announcement that that had changed.
That said, I don't blame the core team for wanting to drop Rails 2.3.
They are already supporting 3 branches in the 3.x line.
that affected 2.3 received a fix and a new release. I also haven't
seen an announcement that that had changed.
That said, I don't blame the core team for wanting to drop Rails 2.3.
They are already supporting 3 branches in the 3.x line.
Robert Walker
Mar 2, 2012, 4:53:16 PM3/2/12
to rubyonra...@googlegroups.com
Rob Olson wrote in post #1049878:
> I was surprised as well. The previous security issue in August 2011
> that affected 2.3 received a fix and a new release. I also haven't
> seen an announcement that that had changed.
>
> That said, I don't blame the core team for wanting to drop Rails 2.3.
> They are already supporting 3 branches in the 3.x line.
> I was surprised as well. The previous security issue in August 2011
> that affected 2.3 received a fix and a new release. I also haven't
> seen an announcement that that had changed.
>
> That said, I don't blame the core team for wanting to drop Rails 2.3.
> They are already supporting 3 branches in the 3.x line.
Not to mention current work on Rails 4.0:
http://weblog.rubyonrails.org/2011/12/20/rails-master-is-now-4-0-0-beta
--
Posted via http://www.ruby-forum.com/.
Morozov Maksim
Mar 2, 2012, 9:18:00 AM3/2/12
to rubyonra...@googlegroups.com
+1
--
You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group.
To post to this group, send email to rubyonra...@googlegroups.com.
To unsubscribe from this group, send email to rubyonrails-ta...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en.
Walter Lee Davis
Mar 4, 2012, 12:59:41 PM3/4/12
to rubyonra...@googlegroups.com
Maybe 2.3 wasn't affected??
Walter
Alex Shulgin
Apr 15, 2012, 12:38:49 AM4/15/12
to rubyonra...@googlegroups.com
On Sunday, March 4, 2012 7:59:41 PM UTC+2, Walter Lee Davis wrote:
>
> Maybe 2.3 wasn't affected??
>
> Maybe 2.3 wasn't affected??
From the original announcement [https://groups.google.com/d/topic/rubyonrails-security/CdoMUVpsRmQ/discussion]:
> Versions Affected: All.
> Fixed Versions: 3.2.2, 3.1.4, 3.0.12
> Fixed Versions: 3.2.2, 3.1.4, 3.0.12
> Please note that only the 3.2.x, 3.1.x, and 3.0.x series are supported at present. Users of earlier unsupported releases are advised to upgrade as soon as possible.
This leaves me with an uneasy feeling as a user of a few projects still based on 2.3 series...
Reply all
Reply to author
Forward
0 new messages