Ruby on Rails creator says install patch, like, now

The Ruby on Rails project on Wednesday released Rails 1.1.5, a security upgrade that creator David Heinemeier Hansson said was a mandatory patch that fixes what he called a critical vulnerability.