NYULibraries / ichabod

99%

development: 99%

LAST BUILD ON BRANCH chore/update-rails-CVE-2104-7829

branch: chore/update-rails-CVE-2104-7829

CHANGE BRANCH

x

Reset

• chore/update-rails-CVE-2104-7829
• feature/rspec
• development
• feature/inbrowser
• feature/authlogic_tests
• feature/authlogic_tests_lamdafied
• feature/configula-ssh
• geospatial_data_search
• feature/geospatial_data_search_tweaked
• feature/webmock_vcr_config
• features/index_publisher
• feature/dataset_by_title
• feature/metadata_remediation_tests
• features/display_url_brief_results
• cucumber_cleanup
• feature/adding_usage_info_urls
• feature/edit_metadata_authorization
• feature/create_gis_cataloger_role
• feature/update_md_outside_ich
• feature/immutable_source_md
• feature/download_link
• feature/collection_facet
• feature/load-fda-ngo
• feature/rethinking_permissions
• feature/resource-set
• feature/production-solr
• feature/rosie-the-riveter
• feature/fix-deploy-data-loader-tasks
• feature/fix-nyucore-in-resource-set-resources
• bug/rails-upgrade-for-CVE-2014-3514
• feature/libguides-resource-set
• feature/edit_button_on_results
• feature/fix-rosie-load-task
• feature/rosie-metadata-mappings
• feature/fix-sdr-and-fda-deploy-tasks
• feature/update_readme
• feature/immutable_source
• feature/production-deploy
• feature/add-fda-examples
• master
• feature/immutable_md_take2
• feature/immutable_source_take2
• tweak-fg-lint
• update-database-config
• feature/multiple_metadata_streams
• feature/resource_set_before_loads
• chore/debug-production-deploy
• feature/asian_ngo_dataloader
• feature/test-users
• feature/multi_metadata_cukes
• chore/describe-chore-branches
• chore/add-user-story-contribution-questions
• feature/multiple_metadata_cukes_with_fixes
• chore/tweak-deploy-for-production
• production_20140905214132
• production_20140908170824
• production_20140908171904
• feature/rosie-the-riveter-collection
• chore/remove-extraneous-file
• chore/update-pds-url
• feature/exlibris-nyu
• chore/add-production-fedora-info
• chore/update-deploy
• chore/ingest-with-rails-env
• chore/remove-cassetes
• chore/dependencies
• bug/reset_test_environment
• chore/make-travis-work
• feature/nyupress_data_loader
• feature/ingest_voices
• ai-accw
• add_jetty_server_var
• masses_reader
• bug/jetty_deploy
• feature/iso_language_code_map
• chore/update-contributing
• chore/breadcrumb
• feature/create-afc-group
• chore/update_contributing
• chore/disable-archive-it-accw
• feature/masses_data_loader
• chore/fix-group-in-scenario
• feature/action_buttons
• bug/fix_nyupress_delete_task
• feature/access_restricted_md
• bug/stabilize-test-data
• chore/change_readme
• feature/add_access_restriction_field
• feature/collection
• chore/change_value_book
• feature/add_isbn
• chore/update-gemfile
• feature/research_guide_facet
• chore/nyucore_markdown
• feature/formaggio
• chore/timeouts-1
• chore/timeouts-60
• chore/timeouts-500
• chore/timeouts-60-mix
• chore/timeouts-1000
• bug/replace-require
• production_20150610162315
• feature/oai_provider
• chore/update-gems
• feature/csv_file_dataloader
• chore/retool_resource_delete_code
• chore/vcr-for-the-masses
• feature/login-integration
• feature/collection_login_integration
• chore/update-travis-to-use-containers
• chore/disable-the-masses
• production_20150722112511
• chore/add-nyucore-tasks
• production_20150729025605
• production_20150729175305
• chore/investigate-facet-failure
• production_20150805043820
• chore/add_rake_rosie_delete
• production_20150812160845
• production_20150813160817
• feature/io
• chore/about_page
• chore/generic_json_loader
• chore/update-uglifier
• production_20150831192525
• production_20150909145602
• feature/thumbnail_image
• feature/add_collection_resource_sets
• chore/update_pds_url
• chore/update_pds_url_tests
• chore/update_travis_email
• production_20150930041240
• feature/login-integration-compatible
• feature/io_new
• chore/fix-typo-in-CONTRIBUTING.md
• chore/update-gitignore-with-intellij-rules
• chore/fixed_collection_facet
• chore/retool_gis_dataset_workflow
• feature/106210416_creator-info-for-nyupress-oa-books
• update-poltergeist-gem-for-phantomjs-2.0.0-support
• chore/fix_sdr_deploy_var
• production_20151118040302
• feature/masses_fix
• feature/collection_new
• chore/update-nokogiri
• production_20151130172319
• ichabod-23_test-if-reducing-number-of-ruby-versions-speeds-up-tests
• update-travis-ruby-versions
• chore/update-travis-ruby-versions
• feature/ngo_fixes
• feature/add_wojnarowicz
• production_20151216052557
• production_20160113145919
• chore/update-rails
• production_20160126045508
• production_20160129203126
• feature/startup_and_shutdown_scripts
• feature/nyucore_fields
• chore/nyucore_fields
• chore/metadata_fields
• feature/update-readme-with-current-data-load-examples
• feature/113551301_update-readme-with-current-data-load-examples
• bugfix/113552525_rake-ichabod-load-fda-ngo-fails-if-specifying-rows-paramter
• bug/113552525_rake-ichabod-load-fda-ngo-fails-if-specifying-rows-parameter
• production_20160217034651
• chore/113569497_update-nyucore-yaml-file-without-updating-catalog-controller
• production_20160226144641
• chore/update-rails-for-CVE-2016-2098
• chore/add-cassette-to-search-feature
• production_20160301154315
• bug/fix_url_woj
• production_20160316154754
• production_20160317192527
• chore/113569497_update-nyucore-yaml-file-display-in-order
• chore/113569497_update-nyucore-yaml-file-without-updating-catalog-controller-dev-rebase
• chore/change_reader_asian_ngo
• production_20160504110011
• chore/113569497_metadata-fields-spec-and-fixture-udpates
• chore/113569497_make-full-display-run-off-yaml
• chore/113569497_full-display-runs-off-yaml
• production_20160518140832
• chore/113569497_specs-for-new-metadata_fields-helpers
• feature/jv_fda_rest_reader
• chore/hotfix-nokogiri-update
• chore/hotfix-master-update-nokogiri
• chore/fix-cukes
• production_20160630181442
• feature/jv_fda_rest_reader_new
• feature/jv_fda_rest_reader_da70-debug
• feature/jv_fda_rest_reader_test-if-gitgeoblacklightreader-making-live-calls
• chore/test-if-gitgeoblacklightreader-making-live-calls
• production_20160714175018
• feature/create_collection
• feature/create_collections
• feature/liberator_120388273
• bugfix/commentout_rspec
• bugfix_commentout_rspec
• test_revert
• chore/test_delpoy
• chore/collection_modification
• chore/change_sdr_source
• chore/test-merge
• production_20160923163735
• production_20160926215440
• chore/added_cucumber_version
• production_20161012231530
• production_20161019032642
• chore/collection_authorization
• production_20161023222744
• production_20161122045837
• chore/fix_indian_ocean
• feature/freedom_137303025
• chore/fix_json

update rails to 4.1.8

Update Rails to version 4.1.8 to address [CVE-2014-7829] "Arbitrary
file existence disclosure in Action Pack".  More details here:
http://seclists.org/oss-sec/2014/q4/718
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7829