Skip to content

Comment on Exploitation of an old Rails vulnerability

Comments

Ever since word of regressions (performance and otherwise) in 3.2.13 https://news.ycombinator.com/item?id=5409978 I've been waiting on news of 3.2.14 ... I wonder if anyone has word on when to expect that, because the vulnerabilities patched in 3.2.13 that we can't take advantage of, make me a little nervous.

You can use 3.2.12 with the security patches added, like Discourse is doing:

https://github.com/discourse/discourse/commits/master/lib/fr...

(to be used as an initializer)

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.