RubyFlow The Ruby and Rails community linklog

2 Vulnerabilities, 3 Releases

Not the sort of news we love to share but.. Ruby 1.8.7, 1.9.1, and 1.9.2 have all been updated today due to vulnerabilities. The first is in FileUtils. The second is with $SAFE (on 1.8.x only).

Comments

I would rather know about the vulnerabilities, than be left in the dark :P

RVM users:

$ rvm upgrade ruby-1.8.7-p334 ruby-1.8.7-p330 $ rvm upgrade ruby-1.9.2-p180 ruby-1.9.2-p136

Still not nice though. We prefer happy happy joy joy and useful gems like NoneSuch ;-)

If you haven’t upgraded ruby in a while, replace the last version in rvm upgrade with the current ruby version. If you’re on ruby-1.9.2-p0, like I was, run:

rvm upgrade ruby-1.9.2-p180 ruby-1.9.2-p0

It’s actually easier than that: rvm will allow you to use “1.8.7” as your “old ruby” string, so you can type:

rvm upgrade ruby-1.9.2-p180 1.9.2 and rvm upgrade ruby-1.8.7-p334 1.8.7

Post a comment

You can use basic HTML markup (e.g. <a>) or Markdown.

As you are not logged in, you will be
directed via GitHub to signup or sign in