Security fix CVE-2012-5664 exists in rails 2.3.15

Rails
1

Hello,
I was looking to migrate the patch described in this
linkhttps://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/DCNTNp_qjFM
(
Redirecting to Google Groups)
to the rails 2.3 branch, but when doing so realized that it’s already
there.

I couldn’t find anything about this in the release notes, I was
wondering
if the link above might be incomplete? If it’s not a mistake, is it
possible to add a note about it somewhere?

Thanks,
Ariel

2

The original announcement of Rails 3.2.10… was posted on January 2.
The current version is at 3.2.12. It’s quite possible the 2.3 branch
has
also advanced.
Rick

3

I was looking for something official that would indicate that.
Thanks,
Ariel

4

Thank you! Just what I was looking for!

5

The change log for rails 2.3.15
( Comparing v2.3.14...v2.3.15 · rails/rails · GitHub) shows that a
fix for cve-2012-5664 was in that version

Fred

6

Start here: Redirecting to Google Groups

Walter