[ANN] Ruby 1.9.3 patchlevel 385 (includes a security fix)

ruby-talk
1

Hi, all

Now Ruby 1.9.3-p385 is released.

This release includes a security fix about bundled RDoc.
See this page for details:
http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256/

And some small bugfixes are also included.

See tickets
https://bugs.ruby-lang.org/projects/ruby-193/issues?set_filter=1&status_id=5
and ChangeLog
http://svn.ruby-lang.org/repos/ruby/tags/v1_9_3_385/ChangeLog
for details.

You can download this release from:

* ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p385.tar.bz2
  SIZE: 10021486 bytes
  MD5: 5ec9aff670f4912b0f6f0e11e855ef6c
  SHA256: f991ee50414dc795696bad0fc5c7b0b94d93b9b38fed943326d20ce4e9dda42b

* ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p385.tar.gz
  SIZE: 12546003 bytes
  MD5: 3e0d7f8512400c1a6732327728a56f1d
  SHA256: 4b15df007f5935ec9696d427d8d6265b121d944d237a2342d5beeeba9b8309d0

* ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p385.zip
  SIZE: 13862147 bytes
  MD5: 044564fe519a2c8e278472c4272b3ff2
  SHA256: 0cb389fcc1ac9fccf32f3db27497908b7365aa910b6dd1559389416e828addc5

Many committers, testers and users who gave bug reports greatly
helped me to make this release.
Thanks for their contributions.

Happy Hacking!

···

--
U.Nakamura <usa@garbagecollect.jp>

2

Is normal upgrade via rvm not possible? (well, obviously there is a workaround suggested below, but I thought perhaps this output indicates a problem someone would want to fix...)

My terminal output:

···

===
rvm upgrade ruby-1.9.3-p374 ruby-1.9.3-p375
Are you sure you wish to upgrade from ruby-1.9.3-p374 to ruby-1.9.3-p375? (Y/n): y
Installing new ruby ruby-1.9.3-p375
Searching for binary rubies, this might take some time.
No binary rubies available for: ubuntu/12.10/i386/ruby-1.9.3-p375.
Continuing with compilation. Please read 'rvm mount' to get more information on binary rubies.
Installing Ruby from source to: /home/tomc/.rvm/rubies/ruby-1.9.3-p375, this may take a while depending on your cpu(s)...
ruby-1.9.3-p375 - #downloading ruby-1.9.3-p375, this may take a while depending on your connection...
There is no checksum for 'http://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p375.tar.bz2&#39; or 'ruby-1.9.3-p375.tar.bz2', it's not possible to validate it.
If you wish to continue with unverified download add '--verify-downloads 1' after the command.

There has been an error fetching the ruby interpreter. Halting the installation.
Unable to install ruby ruby-1.9.3-p375. Please install it manually to continue.

t.

On 02/06/2013 06:54 AM, U.Nakamura wrote:

Hi, all

Now Ruby 1.9.3-p385 is released.

This release includes a security fix about bundled RDoc.
See this page for details:
  XSS exploit of RDoc documentation generated by rdoc (CVE-2013-0256)

And some small bugfixes are also included.

See tickets
  Issues - Backport193 - Ruby Issue Tracking System
and ChangeLog
  http://svn.ruby-lang.org/repos/ruby/tags/v1_9_3_385/ChangeLog
for details.

You can download this release from:

* ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p385.tar.bz2
   SIZE: 10021486 bytes
   MD5: 5ec9aff670f4912b0f6f0e11e855ef6c
   SHA256: f991ee50414dc795696bad0fc5c7b0b94d93b9b38fed943326d20ce4e9dda42b

* ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p385.tar.gz
   SIZE: 12546003 bytes
   MD5: 3e0d7f8512400c1a6732327728a56f1d
   SHA256: 4b15df007f5935ec9696d427d8d6265b121d944d237a2342d5beeeba9b8309d0

* ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p385.zip
   SIZE: 13862147 bytes
   MD5: 044564fe519a2c8e278472c4272b3ff2
   SHA256: 0cb389fcc1ac9fccf32f3db27497908b7365aa910b6dd1559389416e828addc5

Many committers, testers and users who gave bug reports greatly
helped me to make this release.
Thanks for their contributions.

Happy Hacking!