Project

General

Profile

Actions
Copy link

Patch #44304

closed

Update Rails to 7.2.3.2

Added by Go MAEDA about 15 hours ago. Updated about 14 hours ago.

Status:
Closed
Priority:
Normal
Assignee:
Go MAEDA
Category:
Rails support
Target version:
6.0.11

Description

Rails 7.2.3.2 has been released:
https://rubyonrails.org/2026/7/29/Rails-Versions-7-2-3-2-8-0-5-1-and-8-1-3-1-have-been-released

This version of Rails fixes CVE-2026-66066. Redmine is not affected by this vulnerability because it does not use Active Storage for attachments. However, we should still update Rails to 7.2.3.2 to stay up to date.

Related issues

Copied from Redmine - Patch #44303: Update Rails to 8.1.3.1ClosedGo MAEDAActions
Actions
Copy link
 #1

Updated by Go MAEDA about 15 hours ago

Actions
Copy link
 #2

Updated by Go MAEDA about 14 hours ago

  • Status changed from New to Closed
  • Assignee set to Go MAEDA

Done in r24875 and r24876.

Actions
Copy link
 #3

Updated by Go MAEDA about 14 hours ago

  • Category changed from Gems support to Rails support
Actions
Copy link

Also available in: Atom PDF