Ruby on Rails 2.3.4 уже давно вышли. Там два secuity fixes. Одному из которых rails + ruby 1.9 подвержены. Не пора ли обновить?
Пора, но я был несколько занят.
new task #14289: owner=raorn repo=sisyphus task #14289: added #1: build tag ruby-activesupport-2.3.4-alt1 from /people/raorn/packages/rails.git task #14289: added #2: build tag ruby-activerecord-2.3.4-alt1 from /people/raorn/packages/rails.git task #14289: added #3: build tag ruby-actionpack-2.3.4-alt1 from /people/raorn/packages/rails.git task #14289: added #4: build tag ruby-actionmailer-2.3.4-alt1 from /people/raorn/packages/rails.git task #14289: added #5: build tag ruby-activeresource-2.3.4-alt1 from /people/raorn/packages/rails.git task #14289: added #6: build tag ruby-rails-2.3.4-alt1 from /people/raorn/packages/rails.git task #14289: queued, result will be emailed to raorn@altlinux