For anyone who cares or who runs a production site on Rails, DHH just announced the release of Rails 1.1.5 with an undisclosed security patch. Time to
gem install rails
and update your config/environment.rb to use the Rails 1.1.5
# Specifies gem version of Rails to use when # vendor/rails is not present RAILS_GEM_VERSION = '1.1.5'