security1 distinct publisher
Rails patches arbitrary file read and RCE in Active Storage variant processing
Three simultaneous releases fix one flaw in image variant processing. Apps on 7.1 or earlier get no backport at all, so their remedy is a minor-version upgrade under the same clock as everyone else's.
Publishers:rubyonrails.org
Reality
- Evidence58
- Adoption
- Insufficient