Verbatim as attached to http://seclists.org/oss-sec/2012/q2/504
Fix SQL injection via nested hashes in conditions
+1...then please make a release (2.3.15)
+1... and release it as 2.3.15
2.3 is no longer supported, we publish patches as possible but will no longer make releases and no longer guarantee fixes.
Merge remote-tracking branch 'rails/2-3-stable' into 2-3-stable