Riding Rails: Ruby on Rails 1.2.6

"The rails core team has released ruby on rails 1.2.6 to address a bug in the fix for session fixation attacks (CVE-2007-5380). The CVE Identifier for this new issue is CVE-2007-6077."

Complete Story