It looks like the only diff is in activepack: <a href="http://github.com/rails/rails/blob/2-3-stable/actionpack/CHANGELOG" rel="nofollow">http://github.com/rails/rails/blob/2-3-stable/actionpack/CHA...</a><p><i>2.3.8 (May 24, 2010)</i><p>* HTML safety: fix compatibility <i>without</i> the optional rails_xss plugin.<p><i>2.3.7 (May 24, 2010)</i><p>* HTML safety: fix compatibility with the optional rails_xss plugin. [Nathan Weizenbaum, Santiago Pastorino]