On Sun, Feb 3, 2013 at 10:54 PM, Mike Usmar <[email protected]> wrote:

> Hi,
> We have 3 old websites left running on our servers with Rails version
> 1.2.3 (Ruby 1.8.5).
> In light of the recent security vulnerabilities, does anyone know if its
> possible to patch rails 1.2.3 against these? (e.g. the YAML / XML issue)
>

You can try to apply the patch manually using patch(1) and resolve the
conflicts yourself.


> Unfortunately these sites are running customised cart systems, so an
> upgrade to rails 2.x/3.x looks like to be out of the question for now.
>

Upgrading to a sill maintained version of rails is the best long term
option.

Cheers,

-- 
Nicolas Desprès

-- 
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Talk" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to