# \[ANN\] Rails 3.0.17 has been released!

**URL:** <https://rubytalk.org/t/ann-rails-3-0-17-has-been-released/66051>\
**Category:** ruby-talk\
**Created:** [9 August 2012 21:36 UTC](https://rubytalk.org/t/ann-rails-3-0-17-has-been-released/66051 "2012-08-09T21:36:05Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Santiago\_Pastorino](https://avatars.discourse-cdn.com/v4/letter/s/cab0a1/32.png) [@Santiago\_Pastorino](https://rubytalk.org/u/Santiago_Pastorino)\
**Post date:** [9 August 2012 21:36 UTC](https://rubytalk.org/t/ann-rails-3-0-17-has-been-released/66051/1 "2012-08-09T21:36:05Z")

</div>

Good news everyone! Rails version 3.0.17 has been released.

This release of Rails contains three important security fixes:

&nbsp;&nbsp;\* [CVE-2012-3463 Ruby on Rails Potential XSS Vulnerability in  
select\_tag prompt]([https://groups.google.com/d/msg/rubyonrails-security/fV3QUToSMSw/eHBSFOUYHpYJ](https://groups.google.com/d/msg/rubyonrails-security/fV3QUToSMSw/eHBSFOUYHpYJ))  
&nbsp;&nbsp;\* [CVE-2012-3464 Potential XSS Vulnerability in Ruby on  
Rails]([https://groups.google.com/d/msg/rubyonrails-security/kKGNeMrnmiY/r2yM7xy-G48J](https://groups.google.com/d/msg/rubyonrails-security/kKGNeMrnmiY/r2yM7xy-G48J))  
&nbsp;&nbsp;\* [CVE-2012-3465 XSS Vulnerability in  
strip\_tags]([https://groups.google.com/d/msg/rubyonrails-security/FgVEtBajcTY/tYLS1JJTu38J](https://groups.google.com/d/msg/rubyonrails-security/FgVEtBajcTY/tYLS1JJTu38J))

All changes can be found on  
[github]([https://github.com/rails/rails/compare/v3.0.16...v3.0.17](https://github.com/rails/rails/compare/v3.0.16...v3.0.17)).

Thanks everyone!

> **···**
>
> --
> 
> Santiago Pastorino  
> WyeWorks Co-founder  
> [http://www.wyeworks.com](http://www.wyeworks.com)
> 
> Twitter: [http://twitter.com/spastorino](http://twitter.com/spastorino)  
> Github: [http://github.com/spastorino](http://github.com/spastorino)
> 
> --  
> You received this message because you are subscribed to the Google Groups "Ruby on Rails: Core" group.  
> To post to this group, send email to [rubyonrails-core@googlegroups.com](mailto:rubyonrails-core@googlegroups.com).  
> To unsubscribe from this group, send email to [rubyonrails-core+unsubscribe@googlegroups.com](mailto:rubyonrails-core+unsubscribe@googlegroups.com).  
> For more options, visit this group at [http://groups.google.com/group/rubyonrails-core?hl=en](http://groups.google.com/group/rubyonrails-core?hl=en).