Just after writing my previous post I noticed the following post on one of my incoming RSS feeds:
Rails 1.1.5: Mandatory security patch (and more)
From the article:
This is a MANDATORY upgrade for anyone not running on a very recent edge (which isn’t affected by this). If you have a public Rails site, you MUST upgrade to Rails 1.1.5. The security issue is severe and you do not want to be caught unpatched.
Wow… doesn’t sound nice at all… lets hope dreamhost.com updates my rails version ASAP!