and worst thing is I’ve actually read the announcement :
but thought… meh and didn’t click on the CVE 
I was already in the process of rails c my way through it…
but I can confirm that an upgrade resolves this… 
إعجابَين (2)