• Ruby 3.2.5 Released

    Updated: 2024-07-26 10:00:00
    Ruby A Programmer's Best Friend Home Downloads Documentation Libraries Community News Security About Ruby Menu Ruby 3.2.5 Released Posted by nagachika on 26 Jul 2024 Ruby 3.2.5 has been . released This release include many bug-fixes . And we updated the version of bundled gem rexml to include the following security fix . CVE-2024-39908 DoS in REXML Please see the GitHub releases for further . details Download https : cache.ruby-lang.org pub ruby 3.2 ruby-3.2.5.tar.gz SIZE : 20619047 SHA1 : e5166c947a4d9057b1310710a2a963df12264ac9 SHA256 : ef0610b498f60fb5cfd77b51adb3c10f4ca8ed9a17cb87c61e5bea314ac34a16 SHA512 : d86c0151fabf21b418b007465e3f5b3fd0b2de0a9652057fd465b1f7e91b01d00f83a737e972ea994a5d9231e8cb27e64e576852390fe6c2ad502f0d099fe5f4 https : cache.ruby-lang.org pub ruby 3.2

  • CVE-2024-39908 : DoS in REXML

    Updated: 2024-07-16 03:00:00
    Ruby A Programmer's Best Friend Home Downloads Documentation Libraries Community News Security About Ruby Menu CVE-2024-39908 DoS in REXML Posted by watson1978 on 16 Jul 2024 There is a DoS vulnerability in REXML gem . This vulnerability has been assigned the CVE identifier CVE-2024-39908 We strongly recommend upgrading the REXML . gem Details When it parses an XML that has many specific characters such as 0 and REXML gem may take long . time Please update REXML gem to version 3.3.2 or . later Affected versions REXML gem 3.3.1 or prior Credits Thanks to mprogrammer for discovering this . issue History Originally published at 2024-07-16 03:00:00 UTC Recent News Ruby 3.2.5 Released CVE-2024-39908 DoS in REXML Ruby 3.3.4 Released Ruby 3.3.3 Released Ruby 3.3.2 Released Syndicate Recent News

  • Ruby 3.3.4 Released

    Updated: 2024-07-09 00:30:00
    Ruby A Programmer's Best Friend Home Downloads Documentation Libraries Community News Security About Ruby Menu Ruby 3.3.4 Released Posted by k0kubun on 9 Jul 2024 Ruby 3.3.4 has been . released This release fixes a regression in Ruby 3.3.3 that dependencies are missing in the gemspec of some bundled gems : net-pop net-ftp net-imap and prime Bug 20581 The fix allows Bundler to successfully install those gems on platforms like Heroku . If your bundle install runs correctly now , you may not have this . issue Other changes are mostly minor bug fixes . Please see the GitHub releases for further . details Release Schedule Going forward , we intend to release the latest stable Ruby version currently Ruby 3.3 every 2 months after a 1 release . For Ruby 3.3, 3.3.5 is supposed to be released on Sep

Current Feed Items | Previous Months Items

Jun 2024 | May 2024 | Apr 2024 | Mar 2024 | Feb 2024 | Jan 2024