208 Rails 7.2 Changelog

July 29th, 2026: Version 7.2.3.11

• Ported fix for CVE-2026-66066 (disable all untrusted libvips formats)
  • Workaround available via RAILS_LTS_ALLOW_UNTRUSTED_VIPS_OPERATIONS=1
  • Read the announcement Show archive.org snapshot

June 22nd, 2026: Version 7.2.3.10

• Initial release of the LTS version of Rails 7.2.
• This is mostly identical to the latest official 7.2 release (7.2.3.1).
• Backported a patch for CVE-2026-41316 ( Read the announcement Show archive.org snapshot )
• Supports Ruby 3.1+.
• (Skipped some tiny versions to version to stay ahead of any official 7.2.3.x community releases.)