From: Aaron Patterson <tenderlove@...>
Date: 2012-06-13T06:40:22+09:00
Subject: [ANN] Rails version 3.0.14 has been released!


--17/8oYur5Y32USnW
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Good news everyone!  Rails version 3.0.14 has been released.

This release of Rails contains two important security fixes:

  * [CVE-2012-2694 Ruby on Rails Unsafe Query Generation Risk in Ruby on Ra=
ils](https://groups.google.com/group/rubyonrails-security/browse_thread/thr=
ead/8c82d9df8b401c5e)
  * [CVE-2012-2695 Ruby on Rails SQL Injection](https://groups.google.com/g=
roup/rubyonrails-security/browse_thread/thread/9782f44c4540cf59)

Please note that the last round of security fixes DO NOT cover the situatio=
ns that these patches fix.  Therefore it is suggested that all users upgrad=
e immediately.  For more information about these issues, please see the ann=
oumcenents on the [rubyonrails-security mailing list](https://groups.google=
=2Ecom/group/rubyonrails-security).


Other changes for this release can be found in each component's CHANGELOG:

  * [Action Mailer](https://github.com/rails/rails/blob/3-0-stable/actionma=
iler/CHANGELOG)
  * [Action Pack](https://github.com/rails/rails/blob/3-0-stable/actionpack=
/CHANGELOG)
  * [Active Model](https://github.com/rails/rails/blob/3-0-stable/activemod=
el/CHANGELOG)
  * [Active Record](https://github.com/rails/rails/blob/3-0-stable/activere=
cord/CHANGELOG)
  * [Active Support](https://github.com/rails/rails/blob/3-0-stable/actives=
upport/CHANGELOG)
  * [Railties](https://github.com/rails/rails/blob/3-0-stable/railties/CHAN=
GELOG)

All changes can be found [here](https://github.com/rails/rails/compare/v3.0=
=2E13...v3.0.14).

<3<3<3

--=20
Aaron Patterson
http://tenderlovemaking.com/

--17/8oYur5Y32USnW
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (Darwin)

iQEcBAEBAgAGBQJP17c+AAoJEJUxcLy0/6/GHhMIAIGwwusouz4p0CN2iuqvG3S2
+KTRMABlBNZm3VQ5hzu98NB95Oe1JFYIVRTBfojDAJ59XU762jL6l44EflAsWqxA
+YPb6wNx863cF0qeYvLGQTUfdkmxZDtZP9K7ZwS5nNmA06cNyDhtBc1eA0dnJnFY
D7gaxhPWrj8JtE7IIPRDwoMJI06iQkkRXaMrEijsyRcF8c5yLUOaycE6rwxB0xUQ
l4asMlnkYu8Te/TVFuf6u39BiIcuqho2si9UzgGaceBQMW/tpsZ9tQJvMk/5U5Xl
UU4++COgfQH1sVeWB1Zd2Skl7qs0Pyypn5lomCaU/sBUosDcZpiHOm7D8WCxINA=
=shb8
-----END PGP SIGNATURE-----

--17/8oYur5Y32USnW--