Posted by usa on 17 Oct 2018
Ruby 2.3.8 has been released.
This release includes several security fixes. Please check the topics below for details.
- CVE-2018-16396: Tainted flags are not propagated in Array#pack and String#unpack with some directives
- CVE-2018-16395: OpenSSL::X509::Name equality check does not work correctly
This release also includes a non-security fix to support Visual Studio 2014 with Windows 10 October 2018 Update for maintenance reasons.
Ruby 2.3 is now under the state of the security maintenance phase, until the end of March of 2019. After that date, maintenance of Ruby 2.3 will be ended. We recommend you start planning the migration to newer versions of Ruby, such as 2.5 or 2.4.
Download
-
https://cache.ruby-lang.org/pub/ruby/2.3/ruby-2.3.8.tar.bz2
SIZE: 14418609 bytes SHA1: 91b31abdba00a346c155fd32bd32d3cec3b73bc4 SHA256: 4d1a3a88e8cf9aea624eb73843fbfc60a9a281582660f86d5e4e00870397407c SHA512: 6d79e0d25757fd37188a8db3e630a52539bce7927fcb779a2ce9a97b9e5f330753035c16843552f1a1fb6c9a1e5c0f916b3cc8b5c0bfe81e20f35f8442e40ae8
-
https://cache.ruby-lang.org/pub/ruby/2.3/ruby-2.3.8.tar.gz
SIZE: 17858806 bytes SHA1: 69311991a9cd2c8e3c86a0dbbaaf915ae91f0bec SHA256: b5016d61440e939045d4e22979e04708ed6c8e1c52e7edb2553cf40b73c59abf SHA512: 43b02f2f9de6baf281f09a49fd07367127b4de1fb14473380d06bfa7667990d8f722ae2d33cf7d15b02f7e799515f21aebd308897c4c2a5461ebab4049d6c7ef
-
https://cache.ruby-lang.org/pub/ruby/2.3/ruby-2.3.8.tar.xz
SIZE: 11465792 bytes SHA1: 9771acdad851bbf0ef349bb7da5d0ffc91a860ed SHA256: 910f635d84fd0d81ac9bdee0731279e6026cb4cd1315bbbb5dfb22e09c5c1dfe SHA512: 06373050e6c1af9cb6a5863aef878b21c8a45fd0e68414e3d546cb73ec3028207d3acc0a9326428f172b9347a30bbe69a16f9dc0bdb739161d677adb2d888095
-
https://cache.ruby-lang.org/pub/ruby/2.3/ruby-2.3.8.zip
SIZE: 19911652 bytes SHA1: ad9e0ec7c874701832c9e224eb5b9e2258f3a041 SHA256: ec9792d0473a22954ad25cd0c531fc672679c1a5eaeefa08caf9e1288852796f SHA512: 732d69cd55f1c273a02005306720fd8fc9d77398177db9509452be31820976b54b30319d9e6bc36fb6bcd7af656f807ef6c26d8955012c8b20424912a2f51bf8
Release Comment
Thanks to everyone who helped with this release.