# Rails 2.3.4 is now available

**URL:** <https://www.ruby-forum.com/t/rails-2-3-4-is-now-available/174923>\
**Category:** Rails\
**Created:** [September 4, 2009, 6:59am UTC](https://www.ruby-forum.com/t/rails-2-3-4-is-now-available/174923 "2009-09-04T06:59:56Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![railsgirl](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/f6c823/32.png) [@railsgirl](https://www.ruby-forum.com/u/railsgirl)\
**Post date:** [September 4, 2009, 6:59am UTC](https://www.ruby-forum.com/t/rails-2-3-4-is-now-available/174923/1 "2009-09-04T06:59:56Z")

</div>

Happy to inform that… " Rails 2.3.4 is now available."

Does any one know… what’s new in Rails 2.3.4. …?

Pl. share here.

---

<div class="post-metadata">

**Author:** ![railsgirl](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/f6c823/32.png) [@railsgirl](https://www.ruby-forum.com/u/railsgirl)\
**Post date:** [September 4, 2009, 8:59am UTC](https://www.ruby-forum.com/t/rails-2-3-4-is-now-available/174923/2 "2009-09-04T08:59:33Z")

</div>

A security fix!

On Sep 4, 6:59 am, Rails G. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)

---

<div class="post-metadata">

**Author:** ![railsgirl](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/r/f6c823/32.png) [@railsgirl](https://www.ruby-forum.com/u/railsgirl)\
**Post date:** [September 4, 2009, 4:09pm UTC](https://www.ruby-forum.com/t/rails-2-3-4-is-now-available/174923/3 "2009-09-04T16:09:18Z")

</div>

Hi

Check this for more info.

> **[Two vulnerabilities fixed in Rails 2.3.4 - Ruby on Rails Security Project](https://rorsecurity.info/journal/2009/9/4/two-vulnerabilities-fixed-in-rails-234.html)**
>
> Rails version 2.3.4 has been released to fix two vulnerabilities. A timing weakness in the ClientCookieStore. Rails version 2.1.0 and all subsequent versions are affected. Detailed information can be found here. And a XSS vulnerability in the way...

Thanks,