[SEC] [ANN] Rails 3.2.13, 3.1.12, and 2.3.18 have been released!

Better link for today's 4 Rails CVEs: New Brakeman checks expected later today.

Hi everyone! Rails versions 3.2.13, 3.1.12, and 2.3.18 have been released. These releases contain important security fixes. It is recommended users upgrade as soon as possible. Please check out these links for the security fixes: * [CVE-2013-1854 Symbol DoS vulnerability in Active Record](https://groups.google.com/forum/#!topic/ruby-secur... ) * [CVE-2013-1855 XSS vulnerability in sanitize_css in Action Pack](https://groups.google.com/forum/?fromgroups=#!topi... ) * [CVE-2013-1856 XML Parsing Vulnerability affecting JRuby users](https://groups.google.com/forum/?fromgroups=#!topi... ) * [CVE-2013-1857 XSS Vulnerability in the `sanitize` helper of Ruby on Rails](https://groups.google.com/forum/?fromgroups=#!topi... ) All versions of Rails are impacted by one or more of these security issues, but per our [maintenance policy](https://groups.google.com/forum/?fromgroups=#!topi....

Full article: http://www.ruby-forum.com/topic/4412118