Hacker News Reader

Hacker News

Comment by daviding | Hacker News Reader

Parent Full thread

daviding

Given that there is no 3.0.X update this time, where's a good resource to learn about applying the manual patch?

View on HN

I have a blog post here: http://blog.steveklabnik.com/posts/2012-10-04-run-rails-with...

Thank you. Also, info about git patch rather than a git cherrypick, in-case it's useful to anyone:

https://ariejan.net/2009/10/26/how-to-create-and-apply-a-pat...

We setup a repo for you to use with 3.0.20+patch = 3.0.20.1 Maybe it will save you some time: https://www.assembla.com/code/assembla-rails/git/nodes

If you're using Bundler (which I assume you do, for Rails 3.0) tl;dr is changing from:

    gem 'rails', '3.0.20'

    gem 'rails', github: 'rails/rails', branch: '3-0-stable'

This is slightly different: this will mean you're bundling the stable branch, which may or may not be the same as 'the last release plus a single security patch.'

Reply on news.ycombinator.com