# Upgrading from Rails 1.2.3 to 1.2.5

**URL:** <https://www.ruby-forum.com/t/upgrading-from-rails-1-2-3-to-1-2-5/117128>\
**Category:** Rails\
**Created:** [October 13, 2007, 12:04pm UTC](https://www.ruby-forum.com/t/upgrading-from-rails-1-2-3-to-1-2-5/117128 "2007-10-13T12:04:13Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![CCH](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/898d66/32.png) [@CCH](https://www.ruby-forum.com/u/CCH)\
**Post date:** [October 13, 2007, 12:04pm UTC](https://www.ruby-forum.com/t/upgrading-from-rails-1-2-3-to-1-2-5/117128/1 "2007-10-13T12:04:13Z")

</div>

Being adventurous having my first Rails appplication in production  
since August 2007, I read about the impending Rails 2.0 release. As I  
understand it, there was to be a 1.2.4 release and it was supposed to  
be mostly made up of security fixes and deprecation notices that will  
help you prepare for Rails 2.0.

Being cautious, I froze Rails 1.2.3 into the Vendor Directory using  
rake:freeze:gems.

Then I gem install rails --include-dependencies

Surprise…Surprise, the update is to Rails 1.2.5 !

More at [http://cch4rails.blogspot.com](http://cch4rails.blogspot.com)…

---

<div class="post-metadata">

**Author:** ![CCH](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/898d66/32.png) [@CCH](https://www.ruby-forum.com/u/CCH)\
**Post date:** [October 13, 2007, 12:22pm UTC](https://www.ruby-forum.com/t/upgrading-from-rails-1-2-3-to-1-2-5/117128/2 "2007-10-13T12:22:56Z")

</div>

It’s no secret!

> **[Rails 1.2.5: Security and maintenance release](https://rubyonrails.org/2007/10/12/rails-1-2-5-maintenance-release)**
>
> This release closes a JSON XSS vulnerability, fixes a couple of minor regressions introduced in 1.2.4, and backports a handful of features and fixes from the 2.0 preview release.All users of Rails 1.2.4 or earlier are advised to upgrade to 1.2.5,...

DaveP

---

<div class="post-metadata">

**Author:** ![CCH](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/898d66/32.png) [@CCH](https://www.ruby-forum.com/u/CCH)\
**Post date:** [October 13, 2007, 12:39pm UTC](https://www.ruby-forum.com/t/upgrading-from-rails-1-2-3-to-1-2-5/117128/3 "2007-10-13T12:39:21Z")

</div>

Hi Dave

Thanx for the URL !