Ruby 1.8.4 released!
Ruby 1.8.4 has been released. The source is ftp://ftp.ruby-online.co.uk/pub/ruby/ruby-1.8.4.tar.gz, the md5sum is bd8c2e593e1fa4b01fd98eaf016329bb, and filesize is 4,312,965 bytes.
Geschrieben von maki am 24.12.2005
Ruby 1.8.4 preview 2 released
Ruby 1.8.4 preview 2 has been released. You can download the source here. The md5 sum is: e5a48054fb34f09da17e8e8f04b8c706
Geschrieben von David Black am 14.12.2005
New Ruby Web Magazine Goes Live
The newest on-line resource for serious Ruby information has gone live. Ruby Code & Style, an on-line magazine from Artima, has just published issue #1. Check out the names on the advisory board. It’s a Who’s Who of everybody who’s anybody in the Ruby world. The premiere issue has three outstanding articles: First up, Jack Herrington, author of Code Generation in Action (Manning, 2002) and Podcasting Hacks (O’Reilly, 2005), has written Modular Architectures with Ruby Next, Austin Ziegler gives us Creating Printable Documents with Ruby And there’s a reprint of Ara Howard’s article, Linux Clustering with Ruby Queue: Small is Beautiful, which first appeared in Linux Journal but deserves repeat attention A big thanks to the advisory board, and especial to Bill Venners for starting this whole thing.
Geschrieben von james am 11.10.2005
EuRuKo 2005
EuRuKo 2005, die Europäische Ruby Konferenz, wird nun in München am 15. und 16. Oktober 2005 stattfinden. Sie ist immer noch sehr klein und bietet eine intime Atmosphere mit sehr speziellen Themen. Die aktuelle Agenda gibt es hier, letztes Jahr wurden jedoch viele Präsentationen vorort spontan gehalten.
Geschrieben von james am 10.10.2005
Ruby vulnerability in the safe level settings
The Ruby versions listed below have a vulnerability that allows an arbitrary code to run bypassing the safe level check.
Date published: 2005-10-02 Versions affected: Stable releases(1.8.x) - Versions 1.8.2 and earlier (fixed on Version 1.8.3) Old releases(1.6.x) - Versions 1.6.8 and earlier Development versions(1.9.0) - Versions 2005-09-01 and earlier (fixed on Version 2005-09-02)
Solution:
Users of stable releases (1.8.x) and development versions (1.9.0) should update Ruby to the latest versions listed above. Users of old releases (1.6.x) should update to the stable releases (1.8.x) or download the latest snapshot for 1.6.x from the URL below, build, and install.
ftp://ftp.ruby-online.co.uk/pub/ruby/snapshot-1.6.tar.gz
A patch from ruby-1.6.8.tar.gz is also provided at the following location:
ftp://ftp.ruby-online.co.uk/pub/ruby/1.6/1.6.8-patch1.gz
md5sum: 7a97381d61576e68aec94d60bc4cbbab
A patch from ruby-1.8.2.tar.gz is also provided at the following location:
ftp://ftp.ruby-online.co.uk/pub/ruby/1.8/1.8.2-patch1.gz
md5sum: 4f32bae4546421a20a9211253da103d3
Description:
The Object Oriented Scripting Language Ruby supports safely executing an untrusted code with two mechanisms: safe level and taint flag on objects. A vulnerability has been found that allows bypassing these mechanisms. By using the vulnerability, arbitrary code can be executed beyond the restrictions specified in each safe level. Therefore, Ruby has to be updated on all systems that use safe level to execute untrusted code.Reference:
JVN#62914675 http://jvn.jp/jp/JVN%2362914675/index.html (in Japanese)
Acknowledgment:
We thank Dr. Yutaka Oiwa, Research Center for Information Security, National Institute of Advanced Industrial Science and Technology, who found the vulnerability that allows bypassing safe level.
Geschrieben von Matz am 03.10.2005
Ruby 1.8.3 released
Ruby 1.8.3 has been released. The source is here, and the md5sum is 63d6c2bddd6af86664e338b31f3189a6.
Geschrieben von David Black am 21.09.2005
Registration for RubyConf 2005 is CLOSING soon.
Registration for RubyConf 2005 is CLOSING soon. The schedule is as follows:
- Friday, September 16: last day for full registration (meals included)
- Friday, September 23: last day for events-only registration (no meals)
So, all you stragglers, get over to the RubyConf site
Geschrieben von james am 07.09.2005
RubyConf 2005 Registration: Time is running out
David Black announced on ruby-talk that there are now 136 registrants, from 12 countries, for RubyConf 2005. If you still have not registered, do it now. Full registration (i.e., full meal plans) ends in two weeks. Non-full may continue past that, but not forever. Go to the RubyConf site for complete registration details.
Geschrieben von james am 31.08.2005
RubyConf 2005 Registration Tops 100
David A. Black recently reported on ruby-talk that over 100 people have registered for RubyConf 2005, to be held this coming October 14-16 in San Diego. If you haven’t yet registered, now is the time!
Geschrieben von Unknown Author am 20.08.2005
[email protected]
Created [email protected] . If you have found vulnerabilities in Ruby, please report to this address. [email protected] is a private ML, and anyone can post to it without subscription.
Geschrieben von Shugo Maeda am 02.07.2005
XMLRPC.iPIMethods Vulnerability
On Fri Jun 17 2005, a vulnerability of XMLRPC.iPIMethods was reported in [ruby-core:05237]. Remote attackers can execute arbitrary commands by this vulnerability.
Affected Programs
Programs providing XML-RPC services by XMLRPC.iPIMethods are affected.
Fix
This vulnerability was already fixed in both the CVS HEAD and the ruby_1_8 branch.
Please apply this patch for ruby-1.8.2.
Geschrieben von Shugo Maeda am 01.07.2005
Upgrade to Debian GNU/Linux 3.1
We’ll upgrade this host to Debian GNU/Linux 3.1 (sarge) on Wed Jun 29 05:00:00 UTC 2005. Services will be stopped for a while. Successfully DONE. Thank you.
Geschrieben von Shugo Maeda am 22.06.2005
CVS Service läuft wieder
Der CVS Service wurde wieder gestartet.
Geschrieben von Shugo Maeda am 27.04.2005
CVS Service gestoppt
Wir haben den CVS Service, für ein Sicherheitsupdate gestoppt. Der Service wird nach dem Debian Update wieder gestartet.
Geschrieben von Shugo Maeda am 19.04.2005
Server Maintenance
We’ll be performing server maintenance on Thu Apr 14 03:00:00 UTC 2005. It may be down briefly.
Geschrieben von Unknown Author am 14.04.2005
RubyConf 2005 Preregistration now open
Preregistration for the upcoming Fifth Annual International Ruby Conference (RubyConf 2005) is now open. RubyConf 2005 will be held in San Diego, CA, October 14-16. You can preregister here. The full announcement is here.
Geschrieben von Unknown Author am 23.03.2005
RubyCentral CodeFest Grants Announced
Ruby Central announced the the recipients of its first CodeFest Grant Program. Five projects were awarded funding to support regional coding sessions, whose aim are to build working Ruby code to fill a void in the landscape of available Ruby libraries. Congratulations to the recipients!
Geschrieben von chad am 11.03.2005
Ruby Weekly News
Tim Sutherland announced the latest publication of the Ruby Weekly News. The Ruby Weekly News is a weekly summary of the ruby-talk mailing list. Tim recently resurrected it after an extended hiatus. The Ruby Weekly News is a great way to stay in touch with what’s happening in the world of ruby-talk as its volume continues to grow. Many thanks to Tim for this valuable resource!
Geschrieben von chad am 20.02.2005