One of our applications is still running Rails 2.0. I’m planning to upgrade to 2.1 soon, but in the meantime I wanted to upgrade to 2.0.4 to get the patch for the REXML DoS vulnerability. We freeze our version of Rails (and so should you) but I couldn’t freeze in the normal way:
rake rails:freeze:edgeThis resulted in a message that the release was not found so it checked out the head instead.
I managed to freeze by running the following two commands:
sudo gem install rails --version 2.0.4
rake environment VERSION=2.0.4 rails:freeze:gems
