Update: Rails <= 1.0 and Rails 1.1.3 are not affected. That means the Rails versions in Dapper and currenty Edgy are affected.
http://weblog.rubyonrails.com/2006/8/10/security-update-rails-1-0-not- affected -- Mandatory security update https://launchpad.net/bugs/55811 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
