From: "Peña, Botp" <botp@...>
Date: 2008-06-21T15:31:22+09:00
Subject: Re: Arbitrary code execution vulnerabilities

From: Mike Berrow [mailto:mberrow1@pacbell.net] 
# Some people seem to be seeing problems with the 1.8.6-p230 upgrade,
# though.
# See comments at:
# http://weblog.rubyonrails.com/2008/6/21/multiple-ruby-security
# -vulnerabilities

ruby is not rails. upgrading ruby does not mean you've upgraded rails too. wait for the rails upgrade. ask the rails list or dhh.

kind regards -botp