• Ruby 3.2.5 Released

    Updated: 2024-07-26 10:00:00
    Ruby A Programmer's Best Friend Home Downloads Documentation Libraries Community News Security About Ruby Menu Ruby 3.2.5 Released Posted by nagachika on 26 Jul 2024 Ruby 3.2.5 has been . released This release include many bug-fixes . And we updated the version of bundled gem rexml to include the following security fix . CVE-2024-39908 DoS in REXML Please see the GitHub releases for further . details Download https : cache.ruby-lang.org pub ruby 3.2 ruby-3.2.5.tar.gz SIZE : 20619047 SHA1 : e5166c947a4d9057b1310710a2a963df12264ac9 SHA256 : ef0610b498f60fb5cfd77b51adb3c10f4ca8ed9a17cb87c61e5bea314ac34a16 SHA512 : d86c0151fabf21b418b007465e3f5b3fd0b2de0a9652057fd465b1f7e91b01d00f83a737e972ea994a5d9231e8cb27e64e576852390fe6c2ad502f0d099fe5f4 https : cache.ruby-lang.org pub ruby 3.2

  • CVE-2024-39908 : DoS in REXML

    Updated: 2024-07-16 03:00:00
    Ruby A Programmer's Best Friend Home Downloads Documentation Libraries Community News Security About Ruby Menu CVE-2024-39908 DoS in REXML Posted by watson1978 on 16 Jul 2024 There is a DoS vulnerability in REXML gem . This vulnerability has been assigned the CVE identifier CVE-2024-39908 We strongly recommend upgrading the REXML . gem Details When it parses an XML that has many specific characters such as 0 and REXML gem may take long . time Please update REXML gem to version 3.3.2 or . later Affected versions REXML gem 3.3.1 or prior Credits Thanks to mprogrammer for discovering this . issue History Originally published at 2024-07-16 03:00:00 UTC Recent News Ruby 3.2.5 Released CVE-2024-39908 DoS in REXML Ruby 3.3.4 Released Ruby 3.3.3 Released Ruby 3.3.2 Released Syndicate Recent News

  • Ruby 3.3.4 Released

    Updated: 2024-07-09 00:30:00
    Ruby A Programmer's Best Friend Home Downloads Documentation Libraries Community News Security About Ruby Menu Ruby 3.3.4 Released Posted by k0kubun on 9 Jul 2024 Ruby 3.3.4 has been . released This release fixes a regression in Ruby 3.3.3 that dependencies are missing in the gemspec of some bundled gems : net-pop net-ftp net-imap and prime Bug 20581 The fix allows Bundler to successfully install those gems on platforms like Heroku . If your bundle install runs correctly now , you may not have this . issue Other changes are mostly minor bug fixes . Please see the GitHub releases for further . details Release Schedule Going forward , we intend to release the latest stable Ruby version currently Ruby 3.3 every 2 months after a 1 release . For Ruby 3.3, 3.3.5 is supposed to be released on Sep

  • Smooth Ruby and Rails upgrades

    Updated: 2024-07-01 11:30:20
    Articles Topics All Articles Domain-Driven Design Testing Ruby on Rails React JS Async Remote Piotr Jurewicz July 1, 2024 improve this article ruby rails ruby upgrade rails upgrade Smooth Ruby and Rails upgrades and check why 5600+ Rails engineers read also this Smooth Ruby and Rails upgrades Recently , we were consulting and performing updates for several different outdated projects . Those were production-running , keeping the business alive , but they haven't been upgraded for a long . time With the experience from those projects , I'm ready to share some insights on how to make the upgrade process . smooth Before you start Reduce dependencies To make the whole process simpler , I always start with auditing the . Gemfile I check if there are any gems that are not supposed to be there

Previous Months Items

Jun 2024 | May 2024 | Apr 2024 | Mar 2024 | Feb 2024 | Jan 2024