Vulnerability in Sendmail Delivery Agent code in Mail, affects Rails(groups.google.com)
groups.google.com
Vulnerability in Sendmail Delivery Agent code in Mail, affects Rails
http://groups.google.com/group/mail-ruby/browse_thread/thread/e93bbd05706478dd?pli=1
2 comments
missleading subject:
only the rubygem "mail" is affected. Not sendmail or mail(8) itself.
Totally misleading - a headline like this would be really major news. A live, unpatched exploit in mail(8), given the number of unix systems that would be affected (and the nature of the vuln), could open up tons of internet systems to rtm-style worms.
I emphasize could - but come on, the reality of the story linked from this headline is that it's way less severe - maybe just some spam-related consequences.
A better headline: "ruby mail agent vulnerable, affects rails" ... or something...
I emphasize could - but come on, the reality of the story linked from this headline is that it's way less severe - maybe just some spam-related consequences.
A better headline: "ruby mail agent vulnerable, affects rails" ... or something...
This is where having a centralized gem repository might come in handy... If you have 15 projects, you're going to have to go update each and every one.
Usually you do a bundle install when deploying. If you've specified >= 2.2.14 in your Gemfile you just have to redeploy: "cap deploy".
Thanks to user wycats (+team) for bundler. :)
Thanks to user wycats (+team) for bundler. :)
All users who are using sendmail to deliver their system email and running a 2.2.14 or earlier release of Mail should upgrade immediately."