Rails 3.2.20, 4.0.11, 4.1.7, and 4.2.0.beta3 have been released

Posted by tenderlove, October 30, 2014 @ 6:16 pm in Releases

Hello everyone!!! It’s that time again.

I would like to announce that Rails 3.2.20, 4.0.11, 4.1.7, and 4.2.0.beta3 have been released. These releases contain a security fix where the existence of arbitrary files on the file system can be leaked, but the contents of the file will not be leaked. The issue generally only impacts people who are using Rails to serve static assets, and will generally not impact people who use a proxy to serve static assets. You can read more about the issue here (CVE-2014-7818). A release of sprockets has also been made to help with this issue. You can read about it here (CVE-2014-7819).

For ease of upgrading, the only changes in these releases are the security fixes.

Here are the checksums for the gems:

[aaron@TC release]$ shasum *3.2.20*
b14ca1ad923e035ab2a7785e657c5653447c3149  actionmailer-3.2.20.gem
d6fea767996a954e4bc95fd0ca101ec912fcb093  actionpack-3.2.20.gem
97f5bb424aee73fbbd319baab3fd35c3f5eeb5f4  activemodel-3.2.20.gem
32d76836675a4c88685c3904271b16d9d2338ce9  activerecord-3.2.20.gem
640d83a96accc24e6afcae3cc5b253e5d355983f  activeresource-3.2.20.gem
d1d0a19a589c62278e7d9ac4275d5f8d75df20b3  activesupport-3.2.20.gem
f8b4d3c56d89760c02b37d4c67efd31dedd4df80  rails-3.2.20.gem
41c272d53dd748407210a2270ad17bc7c9f30594  railties-3.2.20.gem
[aaron@TC release]$ shasum *4.0.11*
9718b62f4428a7e4bbf66df4ac57dd82d197905a  actionmailer-4.0.11.gem
f1aec3d29e781e3beb685852db00ecf495150077  actionpack-4.0.11.gem
2ba4ceeff0a76df850d6294e2e1da703f3f6e7cb  activemodel-4.0.11.gem
714dca99a452adfec76b507241896ffd7978a254  activerecord-4.0.11.gem
2791791c5c1eeefb3eee76712656bf674a20867d  activesupport-4.0.11.gem
56bb306d4f0309dcf3a804a97104a3ee26b64b94  rails-4.0.11.gem
243e265c879db8876cce8688374cb7f9bb752d7d  railties-4.0.11.gem
[aaron@TC release]$ shasum *4.1.7*
4e4ce2530ff8773af784340e17e925b3b2c8cb20  actionmailer-4.1.7.gem
81628e433ca4335409677a33cfe9b56627f6ae1a  actionpack-4.1.7.gem
7dc2626f5bc85379c55e49a712f5c0e060340ca8  actionview-4.1.7.gem
83c8be73d22973c843d43a988b27a449d2ca8a9d  activemodel-4.1.7.gem
001156373c248a20c69bcf1451d6f7166dac3ddb  activerecord-4.1.7.gem
217f25a911f8e89cd2834849232555cbc47ca850  activesupport-4.1.7.gem
a1d9bb181d718e7f6cf380136425444e627c2345  rails-4.1.7.gem
1b9c8d08afc8fa77786fef13c54d4e6985cdc6d6  railties-4.1.7.gem
[aaron@TC release]$ shasum *4.2.0*
e5d608e8ce32abdd73c73c91fd34cb8f7075a251  actionmailer-4.2.0.beta3.gem
2e2034c285943777ad325c35292e202a46b937c2  actionpack-4.2.0.beta3.gem
a008833cd1045c926fb6f36ee03e3d34499a0aa9  actionview-4.2.0.beta3.gem
02f4438363419c59b33d85b2dda4d4cf741a6098  activejob-4.2.0.beta3.gem
c8a7dc2134c885ad3b23d4c36be95abc1ec1b769  activemodel-4.2.0.beta3.gem
192e33ab3b9d54954ff834ce6ee7f67a9197cb36  activerecord-4.2.0.beta3.gem
00437ab52df0ed0dd9afe571d083c92c3cdbe361  activesupport-4.2.0.beta3.gem
ca81d6ac9fdd658775d32a6dbfe248ee13f5c87b  rails-4.2.0.beta3.gem
cc302e363248e4bc2d245201f922c576f9fe6f15  railties-4.2.0.beta3.gem

Have a great day!!! <3