Ruby 1.8.7-p248 released
We now have a series of patches to fix various bugs against 1.8.7 so I (Urabe Shyouhei) decided to release them. Here they are.
Posted by Urabe Shyouhei on 25 Dec 2009
Ruby 1.9.1-p376 is released
Ruby 1.9.1-p376 just has been released. This is a patch level release of Ruby 1.9.1 and includes the fix of CVE-2009-4124.
Posted by Yugui on 7 Dec 2009
Heap overflow in String (CVE-2009-4124)
There is a heap overflow vulnerability in String#ljust,
String#center and String#rjust. This has allowed an attacker to run
arbitrary code in some rare cases.
Posted by Yugui on 7 Dec 2009
MountainWest RubyConf 2010
MountainWest RubyConf 2010 will be held March 11 and 12, 2010, in Salt Lake City, UT, USA.
Posted by james on 3 Dec 2009