[SEC][ANN] Rails 3.2.12, 3.1.11, and 2.3.17 have been released!

I'd like to announce that Rails 3.2.12, 3.1.11, and 2.3.17 have been released. 3.2.12 and 3.1.11 contain one security fix, and 2.3.17 contains two security fixes. It is recommended that you update immediately. You can read about the security fixes by following these links: CVE-2013-0276 CVE-2013-0277 Please note that today a new JSON gem was released, and it also contains an important security fix. You should update the JSON gem as soon as possible. You can read about the security issue in the JSON gem here: CVE-2013-0269 In order to ease upgrading, the only major changes in each gem is the security fix. To see the detailed changes for each version, follow the links below: Changes in 3.2.12 Changes in 3.1.11 Changes in 2.3.17 Thanks to the people who responsibly reported these security issues. Please note that per our maintenance policy there will be no 3.0.x version relea...

Full article: http://weblog.rubyonrails.org/2013/2/11/SEC-ANN-Rails-3-2...

Tweets

@alexs1010 » 19 Feb '13, 3am
Jooder otra actualización? #RoR 3.2.12 como evolutiona! [link]
@msolujic » 15 Feb '13, 10am
@zilet @mojavelinux @roguelynn #rails #fix is here [link]
@kevinelliott » 14 Feb '13, 3pm
This should go without saying: All you Rails folks -- time to upgrade those servers. [link]
@spencerfry » 14 Feb '13, 2pm
Remember to patch your Rails! [link]
@rails_rt_ja » 14 Feb '13, 11am
RT @Tsuchida: あう、rails の 3.2.12, 3.1.11, 2.3.17 が出てた。 [link]
@Tsuchida » 14 Feb '13, 10am
あう、rails の 3.2.12, 3.1.11, 2.3.17 が出てた。 [link]
@bluerabbit777jp » 13 Feb '13, 11pm
I'd like to announce that Rails 3.2.12, 3.1.11, and 2.3.17 have been released. [link]
@rails_rt_ja » 13 Feb '13, 11am
RT @matsuu: 今すぐアップデートしなさい。 / “Riding Rails: [SEC][ANN] Rails 3.2.12, 3.1.11, and 2.3.17 have been released!” [link]
@matsuu » 13 Feb '13, 10am
今すぐアップデートしなさい。 / “Riding Rails: [SEC][ANN] Rails 3.2.12, 3.1.11, and 2.3.17 have been released!” [link]
@elenawalom » 13 Feb '13, 2am
Thanks! RT @tiffani: Rails 3.2.12 is out! [link]
@jjarmoc » 13 Feb '13, 1am
Looks like @joernchen Rails/ActiveRecord type confusion vuln got patched in 3.2.12. https://t.co/wt0c4SVE No mention at [link]
@jamieontiveros » 12 Feb '13, 11pm
RT @devevangelist: Rails 3.2.12, 3.1.11, and 2.3.17 have been released [link]
@Cloudspace » 12 Feb '13, 9pm
Running a Ruby on Rails application? It's time to upgrade the Rails gem because of a newly dicovered vulnerability - [link]
@_xhr_ » 12 Feb '13, 5pm
Wow. Definitely not a good time for #rails right now [link] #p0wned
@wilderko » 12 Feb '13, 5pm
Rails, can I trust you? [link]
@derekjhopper » 12 Feb '13, 4pm
RT @rubyskills: Riding Rails: [SEC][ANN] Rails 3.2.12, 3.1.11, and 2.3.17 have been released! [link]
@saschaholesch » 12 Feb '13, 2pm
You'd like to update your Rails Apps now, I'd imagine. [link]
@AndrisKrislauks » 12 Feb '13, 1pm
RoR un json gem atjaunojis versijas izlabojot CVE-2013-0276, CVE-2013-0277, CVE-2013-0269 [link]
@damiendesmarets » 12 Feb '13, 11am
New security hole in Ruby on Rails ... Again! Poor security inside the rails? [link] #security #geek #Ruby #RoR
@EmergiaRails » 12 Feb '13, 10am
Rails 3.0.X is dead. Long live Rails 3.0 [link]
@DanTup » 12 Feb '13, 9am
:-\ "@bertjwregeer: This is never going to stop being funny: [link] Yet again another security vulnerability in Rails!"
@Official_SOK » 12 Feb '13, 8am
RT @AFOketunji: Riding Rails: [SEC][ANN] Rails 3.2.12, 3.1.11, and 2.3.17 have been released! [link]
@davidakachaos » 12 Feb '13, 8am
I read [SEC][ANN] Rails 3.2.12, 3.1.11, and 2.3.17 have been released! by tenderlove on [link]
@Darum » 12 Feb '13, 8am
Y seguimos para bingo! Vaya mes.. [link]
@rails_rt_ja » 12 Feb '13, 8am
RT @homata: Rails 3.2.12がリリースされてた [link]
@sreeix » 12 Feb '13, 7am
RT @theshanraj: another day another rails security flaw ... [link]
@homata » 12 Feb '13, 7am
Rails 3.2.12がリリースされてた [link]
@rahul100885 » 12 Feb '13, 6am
Update your rails : two new security fix also update your json gem [link]
@rugginoso » 12 Feb '13, 6am
RT @gionn: [SEC][ANN] Rails 3.2.12, 3.1.11, and 2.3.17 have been released! [link] and three.
@yuroyoro » 12 Feb '13, 6am
パタ子さん「アンパンマン！新しい脆弱性(Vulnerability)よ！」 > [SEC][ANN] Rails 3.2.12, 3.1.11, and 2.3.17 have been released! : [link]
@bijendrakr » 12 Feb '13, 6am
Rails security and json update [link] #Done
@rubynews_j » 12 Feb '13, 5am
Riding Rails: [SEC][ANN] Rails 3.2.12, 3.1.11, and 2.3.17 have been released! [link] #ruby #rubyjp
@bsodmike » 12 Feb '13, 5am
Hi all, it's security-fix Tuesday in #rails land today! Update to Rails 3.2.12 and upgrade your JSON gem [link] #ruby
@revathskumar » 12 Feb '13, 5am
#Rails 3.2.12, 3.1.11, and 2.3.17 have been released! Another security fix. update immediately. [link]
@theshanraj » 12 Feb '13, 4am
another day another rails security flaw ... [link]
@rails_rt_ja » 12 Feb '13, 4am
RT @nysalor: Railsのセキュリティフィックス [link] attr_protectedが回避される、シリアライズしたYAMLの脆弱性（3.0以前のみ）、あとJSON gemの更新（パーサの脆弱性修正）かな
@elim » 12 Feb '13, 3am
RT @tatsuoSakurai: "Riding Rails: [SEC][ANN] Rails 3.2.12, 3.1.11, and 2.3.17 have been released!" [link]
@katton » 12 Feb '13, 3am
「3.2.12 and 3.1.11 contain one security fix, and 2.3.17 contains two security fixes. It is recommended that you upda… [link]
@nysalor » 12 Feb '13, 3am
Railsのセキュリティフィックス [link] attr_protectedが回避される、シリアライズしたYAMLの脆弱性（3.0以前のみ）、あとJSON gemの更新（パーサの脆弱性修正）かな
@remiplourde » 12 Feb '13, 3am
Rails — Released: 3.2.12, 3.1.11, & 2.3.17, with important security fixes. [link]
@rails_rt_ja » 12 Feb '13, 2am
RT @moongift: セキュリティ関係なのでアップデートしておくのがよろし。 [link] via Rails 3.2.12、3.1.11、2.3.17がリリース [link]
@tukhfatullin » 12 Feb '13, 1am
“@rails: [SEC][ANN] Rails 3.2.12, 3.1.11, and 2.3.17 have been released! Please see the announcement here: [link]” ААААААА!!
@moongift » 12 Feb '13, 1am
セキュリティ関係なのでアップデートしておくのがよろし。 [link] via Rails 3.2.12、3.1.11、2.3.17がリリース [link]
@mad_p » 12 Feb '13, 1am
RT @ryonext: RailsのSecurity Fix [link]
@ryonext » 12 Feb '13, 1am
RailsのSecurity Fix [link]
@tiffani » 12 Feb '13, 1am
Rails 3.2.12 is out! [link]
@rails_rt_ja » 12 Feb '13, 1am
RT @cho_co: 3.2.12 来てる / “Riding Rails: [SEC][ANN] Rails 3.2.12, 3.1.11, and 2.3.17 have been released!” [link]
@rails_rt_ja » 12 Feb '13, 1am
RT @znz: rails が 3.2.12 になってたり twitter-bootstrap が 2.3.0 になってたりするのに対処中。 [link] [link]
@amandaschwandt » 12 Feb '13, 12am
"@derekrockwell: Heads up, time to update Rails again. [link]" I'm here! Yay!
@cocoaineinc » 12 Feb '13, 12am
RT @sungheeekang: [SEC][ANN] Rails 3.2.12, 3.1.11, and 2.3.17 have been released! [link] 요즘따라 보안이슈 패치가 많이 올라오네. 여튼 빨리 업데이트 합시다. ㅎㄷ