Ruby on Rails News

The Rails Blog: News & Release Notes

Discover the latest Rails news, version releases, community updates, and feature announcements.

  • Rails 3 Bugmash

    RailsBridge has organized a Rails 3 Bugmash on January 16th and 17th. The idea is to try and upgrade your apps and favourite plugins/gems to work with Rails 3 and...

  • Getting a New App Running on Edge

    (cross-posted from Yehuda’s Blog) So people have been attempting to get a Rails app up and running recently. I also have some apps in development on Rails 3, so I’ve...

  • Ruby on Rails 2.3.5 Released

    Rails 2.3.5 was released over the weekend which provides several bug-fixes and one security fix. It should be fully compatible with all prior 2.3.x releases and can be easily upgraded...

  • Community Highlights

    I’m always impressed by the continuous flow of innovation from the Rails community. Below are just a few of the highlights from the past month. These stories all came from...

  • What's New in Edge Rails

    So, Edge Rails is still chugging right along. There are new and interesting fixes, changes, and refactors going on all of the time. So, lets take a look at just...

  • RubyEnRails 2009

    RubyEnRails 2009 goes down this 30/31 October in Amsterdam. Talks are in English and Dutch. RubyEnRails has been all-volunteer for four years running, building on a history of sweet venues,...

  • What's New in Edge Rails: The Security Edition

    It’s been a bit over two weeks since the last WNiER (“winner”?) post and in the time since our last visit, Ruby on Rails 2.3.4 was released to fix some...

  • Ruby on Rails 2.3.4: Security Fixes

    We’ve released Ruby on Rails 2.3.4, this release fixes bugs and introduces a few minor features. Due to the inclusion of two security fixes, all users of the 2.3 series...

  • Timing Weakness in Ruby on Rails

    There is a weakness in the code Ruby on Rails uses to verify message digests in the cookie store. Because it uses a non-constant time algorithm to verify the signatures...

  • XSS Vulnerability in Ruby on Rails

    There is a vulnerability in the escaping code for the form helpers in Ruby on Rails. Attackers who can inject deliberately malformed unicode strings into the form helpers can defeat...