title: Trying to trace a security issue. Can someone expain how ruby gem versioning works?
body: <p>Say you have a Rails application that uses ActiveRecord 4.2.5 and an included gem that uses an earlier version, say 3.2.14. Do both versions get loaded and used independently (I'm guessing yes)? Is there any way I can make this gem use a newer version? The gem in question has this entry in my Gemfile.lock:</p>
  
  <pre><code>GEM
    remote: https://rubygems.org/
    specs:
      .
      .
      .
      fuzzily (0.3.3)
        activerecord (&gt;= 2.3.17)
  </code></pre>