Re: [Rails] Patch Rails 1.2.3 for latest vulnerabilities?

2013-02-04 Thread Nicolas Desprès
On Sun, Feb 3, 2013 at 10:54 PM, Mike Usmar li...@ruby-forum.com wrote: Hi, We have 3 old websites left running on our servers with Rails version 1.2.3 (Ruby 1.8.5). In light of the recent security vulnerabilities, does anyone know if its possible to patch rails 1.2.3 against these? (e.g.

[Rails] Patch Rails 1.2.3 for latest vulnerabilities?

2013-02-03 Thread Mike Usmar
Hi, We have 3 old websites left running on our servers with Rails version 1.2.3 (Ruby 1.8.5). In light of the recent security vulnerabilities, does anyone know if its possible to patch rails 1.2.3 against these? (e.g. the YAML / XML issue) Unfortunately these sites are running customised cart