Intrepid Ibex reached end-of-life on 30 April 2010 so I am closing the report. The bug has been fixed in newer releases of Ubuntu.
** Changed in: rails (Ubuntu Intrepid) Status: Confirmed => Invalid -- all versions of rails are vunerable to CVE-2009-3009 https://bugs.launchpad.net/bugs/425988 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs