Rails 7.2 Changelog
July 29th, 2026: Version 7.2.3.11
- Ported fix for CVE-2026-66066 (disable all untrusted libvips formats)
- Workaround available via
RAILS_LTS_ALLOW_UNTRUSTED_VIPS_OPERATIONS=1 - Read the announcement Show archive.org snapshot
- Workaround available via
June 22nd, 2026: Version 7.2.3.10
- Initial release of the LTS version of Rails 7.2.
- This is mostly identical to the latest official 7.2 release (7.2.3.1).
- Backported a patch for CVE-2026-41316 ( Read the announcement Show archive.org snapshot )
- Supports Ruby 3.1+.
- (Skipped some tiny versions to version to stay ahead of any official 7.2.3.x community releases.)