Multiple CVEs in rails

46 views

Skip to first unread message

John Hawthorn

unread,

Jan 25, 2016, 4:40:52 PM1/25/16

to solidus-...@googlegroups.com

Rails has announced multiple CVEs and has released a new version, 4.2.5.1. All users are advised to upgrade rails to this version.

We don't know of any ways Solidus would specifically be vulnerable to XSS or Information Leak vulnerabilities disclosed, but we recommend all users upgrade immediately to be on the safe side.

The full list of vulnerabilities can be found at https://groups.google.com/forum/#!topic/rubyonrails-security