The security fix announcement today sent to the rubyonrails-security group implied that Rails 2.3 is no longer supported. Is that the case? Did I miss an announcement somewhere? Is there a list of supported releases somewhere? (What was I supposed to be paying attention to?) Thanks, --Paul -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFF+G/Ez6ZCGd0@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk+unsubscribe-/JYPxA39Uh5TLH3MbocFF+G/Ez6ZCGd0@public.gmane.org For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en.
I was surprised as well. The previous security issue in August 2011 that affected 2.3 received a fix and a new release. I also haven''t seen an announcement that that had changed. That said, I don''t blame the core team for wanting to drop Rails 2.3. They are already supporting 3 branches in the 3.x line. On Mar 1, 1:15 pm, "Paul E. G. Lynch" <plynch...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:> The security fix announcement today sent to the rubyonrails-security > group implied that Rails 2.3 is no longer supported. Is that the > case? Did I miss an announcement somewhere? Is there a list of > supported releases somewhere? (What was I supposed to be paying > attention to?) Thanks, > > --Paul-- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFF+G/Ez6ZCGd0@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en.
Rob Olson wrote in post #1049878:> I was surprised as well. The previous security issue in August 2011 > that affected 2.3 received a fix and a new release. I also haven''t > seen an announcement that that had changed. > > That said, I don''t blame the core team for wanting to drop Rails 2.3. > They are already supporting 3 branches in the 3.x line.Not to mention current work on Rails 4.0: http://weblog.rubyonrails.org/2011/12/20/rails-master-is-now-4-0-0-beta -- Posted via http://www.ruby-forum.com/. -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFF+G/Ez6ZCGd0@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk+unsubscribe-/JYPxA39Uh5TLH3MbocFF+G/Ez6ZCGd0@public.gmane.org For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en.
On Mar 1, 2012, at 4:15 PM, Paul E. G. Lynch wrote:> The security fix announcement today sent to the rubyonrails-security > group implied that Rails 2.3 is no longer supported. Is that the > case? Did I miss an announcement somewhere? Is there a list of > supported releases somewhere? (What was I supposed to be paying > attention to?) Thanks, > > --Paul >Maybe 2.3 wasn''t affected?? Walter -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFF+G/Ez6ZCGd0@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk+unsubscribe-/JYPxA39Uh5TLH3MbocFF+G/Ez6ZCGd0@public.gmane.org For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en.
On Sunday, March 4, 2012 7:59:41 PM UTC+2, Walter Lee Davis wrote:> > Maybe 2.3 wasn''t affected??From the original announcement [https://groups.google.com/d/topic/rubyonrails-security/CdoMUVpsRmQ/discussion]:> Versions Affected: All. > Fixed Versions: 3.2.2, 3.1.4, 3.0.12> Please note that only the 3.2.x, 3.1.x, and 3.0.x series are supportedat present. Users of earlier unsupported releases are advised to upgrade as soon as possible. This leaves me with an uneasy feeling as a user of a few projects still based on 2.3 series... -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To view this discussion on the web visit https://groups.google.com/d/msg/rubyonrails-talk/-/368GA-TeQ6AJ. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFF+G/Ez6ZCGd0@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk+unsubscribe-/JYPxA39Uh5TLH3MbocFF+G/Ez6ZCGd0@public.gmane.org For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en.