[Qgis-developer] Redmine : need to upgrade rails ?

[Pirmin Kalberer]

Hi Michaël,

Am Freitag, 1. Februar 2013, 09.27:34 schrieb kimaidou:
> 
> A friend of mlne warned me about the need to patch the rails engine for
> security reasons. I have not checked further, as I no longer run a redmine
> instance on my server, but I think it is safer to have a look for the Qgis
> redmine server ?

During the hackfest in Essen, we migrated hub.qgis.org to the Redmine package 
of Debian squeeze. Debian has released security fixes for all recent Rails 
issues.

Regards
Pirmin

> 
> http://news.techworld.com/security/3418412/ruby-on-rails-security-updates-ad
> dress-sql-injection-flaw/
> http://www.kalzumeus.com/2013/01/31/what-the-rails-security-issue-means-for
> -your-startup/
> 
> Cheers

-- 
Pirmin Kalberer
Sourcepole  -  Linux & Open Source Solutions
http://www.sourcepole.com