CHANGELOG in activesupport-2.3.14 vs CHANGELOG in activesupport-2.3.15

@@ -1,5 +1,11 @@
+## Rails 2.3.15 (Jan 8, 2012) ##
+
+* Hash.from_xml raises when it encounters type="symbol" or type="yaml". Use Hash.from_trusted_xml to parse this XML. CVE-2013-0156 [Jeremy Kemper]
+
+
 *2.3.11 (February 9, 2011)*
+
 
 *2.3.10 (October 15, 2010)*
 
 
 *2.3.9 (September 4, 2010)*