From: Aaron Patterson <tenderlove@...>
Date: 2012-06-13T06:37:15+09:00
Subject: [ANN] Rails version 3.2.6 has been released.


--wchHw8dVAp53YPj8
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Good news everyone!  Rails version 3.2.6 has been released.

This release of Rails contains two important security fixes:

  * [CVE-2012-2694 Ruby on Rails Unsafe Query Generation Risk in Ruby on Ra=
ils](https://groups.google.com/group/rubyonrails-security/browse_thread/thr=
ead/8c82d9df8b401c5e)
  * [CVE-2012-2695 Ruby on Rails SQL Injection](https://groups.google.com/g=
roup/rubyonrails-security/browse_thread/thread/9782f44c4540cf59)

Please note that the last round of security fixes DO NOT cover the situatio=
ns that these patches fix.  Therefore it is suggested that all users upgrad=
e immediately.  For more information about these issues, please see the ann=
oumcenents on the [rubyonrails-security mailing list](https://groups.google=
=2Ecom/group/rubyonrails-security).


Other changes for this release can be found in each component's CHANGELOG:

  * [Action Mailer](https://github.com/rails/rails/blob/3-2-stable/actionma=
iler/CHANGELOG)
  * [Action Pack](https://github.com/rails/rails/blob/3-2-stable/actionpack=
/CHANGELOG)
  * [Active Model](https://github.com/rails/rails/blob/3-2-stable/activemod=
el/CHANGELOG)
  * [Active Record](https://github.com/rails/rails/blob/3-2-stable/activere=
cord/CHANGELOG)
  * [Active Support](https://github.com/rails/rails/blob/3-2-stable/actives=
upport/CHANGELOG)
  * [Railties](https://github.com/rails/rails/blob/3-2-stable/railties/CHAN=
GELOG)

All changes can be found [here](https://github.com/rails/rails/compare/v3.2=
=2E5...v3.2.6).

<3<3<3

--=20
Aaron Patterson
http://tenderlovemaking.com/

--wchHw8dVAp53YPj8
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (Darwin)

iQEcBAEBAgAGBQJP17aHAAoJEJUxcLy0/6/GLrUIAJn1imHpDQUzfNgg37YhV9l4
Rp+hBMjj7vxe4TBjkWMokWWEikV7/zUWy0QJtSA4a3UX/1x5idYnvuQfJC4Uztbc
5pxrgq2pOgS2n3iWMASi6x7ZzEalztmFt+1tBg67jTA2vFWVdPuP/UTcK0iD+1MH
52XaEshq6ZoR2/Y5lyg8YAgfQ9/KqUFzvC2t+k81h3ND0/D6/NxyzO7+OXg1SPCL
/eJGYcDglx1Jq4ieNUTBAJAprGW+olP8wLefS/yuEiYT5mP0ox4q3RUZzGwIqcAl
37Q5wfA5koGOUZVwOI2myUos/ZF1ybvGqGqDhd9W+pION9/4O4W6nFL19zbbOYQ=
=v500
-----END PGP SIGNATURE-----

--wchHw8dVAp53YPj8--