Changes.Watch

Rails changelog digest

Jun 30 - Jul 6, 2025. Useful releases, risky migrations, and noisy updates from the Rails channel.

No matching updates in this bucket.

Rails updates in 2025-w27

8.0.3

  • Security fixes address out-of-bounds write in HyperLogLog commands (CVE-2025-32023, CVE-2025-48367) and improve connection acceptance handling after errors.
  • New VSIM feature adds WITHATTRIBS to return the JSON attribute associated with an element.
  • Bug fixes prevent a short-read from causing replica exit and resolve defragmentation issues with expired keys.

7.4.5

  • Security patches addressing CVE-2025-32023 and CVE-2025-48367 (out-of-bounds write in HyperLogLog commands).
  • Improved connection handling: retry accepting new connections even after an accept error.

7.2.10

  • Fix out-of-bounds write in HyperLogLog commands (CVE‑2025‑32023).
  • Retry accepting new connections even if the accepted connection reports an error (CVE‑2025‑48367).

6.2.19

  • Fixed out-of-bounds write vulnerability in HyperLogLog commands (CVE‑2025‑32023, CVE‑2025‑48367).
  • Improved server accept loop to retry accepting new connections even when a connection reports an error.