Arbitrary code execution vulnerabilities

Multiple vulnerabilities in Ruby may lead to a denial of service (DoS) condition or allow execution of arbitrary code.

Continue Reading…

RubyNation 2008

RubyNation is an annual Ruby conference serving the Virginia, West Virginia, Maryland, and Washington, DC areas. This year’s RubyNation will happen on August 1&2, 2008 in Herndon, VA. Please visit the RubyNation site for more details.

Ruby 1.8.7 has been released

Akinori MUSHA announced today that Ruby 1.8.7 has been released.

The new version of Ruby includes many bug fixes, lots of feature enhancements backported from 1.9 and some performance improvements since 1.8.6 while maintaining stability and backward compatibility with the previous release to a high degree. See the bundled documentation for details about compatibility issues.

The source code package is available in three formats at the following locations:


  • MD5 (ruby-1.8.7.tar.bz2) = f17f14c8d55e731b3ce1bc35c42f0a6c
  • SHA256 (ruby-1.8.7.tar.bz2) = 65f2a862ba5e88bac7a78cff15bcb88d7534e741b51a1ffb79a0136c7041359a
  • SIZE (ruby-1.8.7.tar.bz2) = 4100024
  • MD5 (ruby-1.8.7.tar.gz) = de906850f9a012c12ffc6e9f56fb1b66
  • SHA256 (ruby-1.8.7.tar.gz) = 600dccf13bca3e4179fa6ff554220ce4ba67ffc72bce1ac3bf74c2599c03a0ca
  • SIZE (ruby-1.8.7.tar.gz) = 4799732
  • MD5 ( = 14d3eb37b32e4a26966bdd80f361ccd2
  • SHA256 ( = 805987ad167d8f9cac90e4b9342686e96a7708664111be27a3c6d680ce21d6c1
  • SIZE ( = 5851408

For a brief list of user visible changes and a full list of all changes, see the bundled files named NEWS and ChangeLog, which are also available at the following locations:


Continue Reading…

Server maintenance

Services on except SVN will be down for server maintenance on Fri May 23 02:00:00 UTC 2008. Sorry for inconvenience.

Tulsa Ruby Workshop

I wanted to get the word out about the upcoming Tulsa Ruby Workshop. This will take place on April 26th, from 10 AM to 4 PM in Tulsa, OK.

The workshop has a great line up of intro Ruby and Rail content. I’m honored to have been asked to give two of the talks that day: an introduction to Ruby talk as well as a Ruby from Java talk. There will also be a beginning Rails talk from Tulsa.rb’s commander and chief, an Engine Yard employee on hand sharing deployment advice, as well as other language specific migration talks.

That’s pretty much a full day of Ruby learning and the best news is that attendance is free. They are even throwing in some food.

If you’re going to be in the area, definitely come join us!

You can find directions, a schedule, and other details about the workshop at:

Hope to see you there.

File access vulnerability of WEBrick

WEBrick, a standard library of Ruby to implement HTTP servers, has file access vulnerability.

Continue Reading…

Scotland on Rails 2008

Scotland on Rails is pleased to announce that Conference2008 is open for registration. There is a limit to the number of registrations we’re able to accept so we’d advise you to get in quickly :-)

You can register at The conference will take place on April 4th and 5th in Edinburgh (in a castle!), Scotland and will feature speakers from the UK, Europe, US and New Zealand including keynotes from Michael Koziarski and David Black. A list of sessions and speakers is available at

We’re also planning a charity event on Thursday 3rd. This will feature an beginner level intro to Ruby and Rails in the morning, and sessions from several of the speakers from the main conference (including Jim Weirich, Bruce Williams and Giles Bowkett) in the afternoon. All the money raised from that days event will be going to CHAS – The Childrens Hospice Association.

European Ruby Confrence 2008 (EURUKO)

EURUKO is an annual conference about the Ruby programming language with an informal atmosphere and lots of opportunities to listen, to talk, to hack and to have fun. This year it takes place in Prague, Czech Republic, on March 29th to 30th.

MountainWest RubyConf 2008

Registration for MountainWest RubyConf 2008 is now open. This year features an expanded schedule and list of speakers.

The conference will be in Salt Lake City, Utah, USA, on March 28 and 29, 2008. Registration costs just $100 and includes lunch both days, t-shirt, and more.

Ruby Fool’s Conference

The first Ruby Fools conference will be held on April Fools’ Day in Copenhagen, Denmark. The conference organizers intend to cater a bit to both expert and novice developers, so any Rubyists in the area may want to consider attending.

Ruby logo available

The official Ruby logo is available to download under Creative Commons Attribution-Share Alike license now. Available formats are Illustrator/SVG/PDF/PNG.