Posted by hsbt on 23 Apr 2024

Ruby 3.1.5 has been released.

This release includes security fixes. Please check the topics below for details.

• CVE-2024-27282: Arbitrary memory address read vulnerability with Regex search
• CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc
• CVE-2024-27280: Buffer overread vulnerability in StringIO

See the GitHub releases for further details.

Download

• https://cache.ruby-lang.org/pub/ruby/3.1/ruby-3.1.5.tar.gz

  SIZE: 20884264
  SHA1: e3387c8fa2b6faf20beade2239ebdfc701ee6268
  SHA256: 3685c51eeee1352c31ea039706d71976f53d00ab6d77312de6aa1abaf5cda2c5
  SHA512: 23661cb1b61013d912b7433f8707bbcd723391694d91f413747c71428e74f8c7385c1304de7d08b70c9fa3bd649e4eb5e9acb472d89dc2ad5678cc54855a24ae
  

• https://cache.ruby-lang.org/pub/ruby/3.1/ruby-3.1.5.tar.xz

  SIZE: 15293020
  SHA1: 807bf2b261cf71e7fe58641a6b5dac61fdeb05ea
  SHA256: f9375a45bdf1cc41298558e7ac6c367f7b6cdcccf7196618b21f0886ff583b91
  SHA512: a9883f4d074825bb1f54ef3429a9a71341274bd2de1aa8ea32bce19b6b9c1bac5e5dc4c34a92b8e7caa73ba71d7ed7c546a6fec6f1fd3d8986974dce214f6d49
  

• https://cache.ruby-lang.org/pub/ruby/3.1/ruby-3.1.5.zip

  SIZE: 25208327
  SHA1: 83c6b2f26a35a1b23fef091e6db5c60ad0f52bf9
  SHA256: e5eefbd95844b0322f6b2650cdef4d884d31c08856df7362375d26360cca9ba4
  SHA512: 390e6f99b101aa80de924532bfb0b9fc29702b1e14b92e12cc596e9c76f9a2e52ba0e72eb95accb4bac16d5d10d81900a2e8afba80aa514ef870f52cfd50b4fd
  

Release Comment

Many committers, developers, and users who provided bug reports helped us make this release. Thanks for their contributions.

Syndicate

Recent News (RSS)