From: Aaron Patterson <aaron@...>
Date: 2011-06-09T01:10:58+09:00
Subject: [ANN] Rails 3.0.8 has been released!

--8GpibOaaTibBMecb
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

# Security Issues!

This release contains fixes for possible XSS problems in your rails applica=
tion.  It is unlikely that your application is vulnerable, but you should t=
ake precautions by updating your application.

For more information about the XSS issue that was fixed in this release, pl=
ease [read this blog post](http://weblog.rubyonrails.org/2011/6/8/potential=
-xss-vulnerability-in-ruby-on-rails-applications).

## WELCOME!

Hi everyone!  I've released Rails version 3.0.8!

I know I told you I would release Rails 3.0.8 on June 2nd.  I may put many =
hearts in my emails, but I'm quite serious about sticking to announced dead=
lines.  The reason this release was delayed is due to the above security is=
sue.  I needed to coordinate three different versions to be released simult=
aniously, and that delayed this release.

Sorry about that!  Barring "perfect storm" issues like this, I will keep yo=
u up to date on release dates as I know them.  :-)

## CHANGES

The big changes in this release are:

* Fixing Rake 0.9.x integration
* Fixing rubygems deprecation warnings
* Refactoring YAML support to work well with Psych and Syck
* Joins on polymorphic `has_one` associations are fixed

For an exaustive log of changes, please [see the commit list on github](htt=
ps://github.com/rails/rails/compare/v3.0.7...v3.0.8), or the CHANGELOG for =
each project.

--=20
Aaron Patterson
http://tenderlovemaking.com/

--8GpibOaaTibBMecb
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (Darwin)

iQEcBAEBAgAGBQJN758JAAoJEJUxcLy0/6/G/MEH/iA2lqh+eE+pcqXhzjJ7zNXU
cmjElWaZshR55W0AWFksASpyK8oDnEPqGQuEKKDl00lbN1dHZThRaLdQTXuNV0IR
XE8JXjQVJd7Yy855KfsVuXke85IFuXSMd1Zvl+Lbzk9mTEUwpza/EgvboaOOO0Fe
bTf12QArNv9pM6CPgKkZx+MrMg5qZU11QgZMWkzUm4SHrsKSfJNBXLLG3eLPmP7t
sq5m6wwB14WJCbP9kDKOrNCg1TRdtIZrESp5zBYta7Q7ZotZ8JKPjvWvkiV5XnVh
0B5gmS/f4kUjFRGSdBYWFYfm38bTog7N1bxio6RIpNXfKtsA8NkvzB82zB470s4=
=sa+i
-----END PGP SIGNATURE-----

--8GpibOaaTibBMecb--