Security fix CVE-2012-5664 exists in rails 2.3.15

rubyonrails-talk
1

The original announcement of Rails 3.2.10… was posted on January 2. The current version is at 3.2.12. It’s quite possible the 2.3 branch has also advanced. Rick

2

I was looking for something official that would indicate that.

Thanks,

Ariel

3

The change log for rails 2.3.15 ( Comparing v2.3.14...v2.3.15 · rails/rails · GitHub) shows that a fix for cve-2012-5664 was in that version

Fred

4

Thank you! Just what I was looking for!

5

Start here: Redirecting to Google Groups

Walter