Hi, all
We've just released Ruby 2.4.2, 2.3.5 and 2.2.8.
How to download and details:
* [Ruby 2.4.2 Released](https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-4-2-released/)
* [Ruby 2.3.5 Released](https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released/)
* [Ruby 2.2.8 Released](https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-2-8-released/)
These releases include several security fixes.
You can check details:
* [CVE-2017-0898: Buffer underrun vulnerability in Kernel.sprintf](https://www.ruby-lang.org/en/news/2017/09/14/sprintf-buffer-underrun-cve-2017-0898/)
* [CVE-2017-10784: Escape sequence injection vulnerability in the Basic authentication of WEBrick](https://www.ruby-lang.org/en/news/2017/09/14/webrick-basic-auth-escape-sequence-injection-cve-2017-10784/)
* [CVE-2017-14033: Buffer underrun vulnerability in OpenSSL ASN1 docode](https://www.ruby-lang.org/en/news/2017/09/14/openssl-asn1-buffer-underrun-cve-2017-14033/)
* [CVE-2017-14064: Heap exposure vulnerability in generating JSON](https://www.ruby-lang.org/en/news/2017/09/14/json-heap-exposure-cve-2017-14064/)
* [Multiple vulnerabilities in RubyGems](https://www.ruby-lang.org/en/news/2017/08/29/multiple-vulnerabilities-in-rubygems/)
We strongly recommend to upgrade your ruby installations as soon as
possible.
Regards,
ยทยทยท
--
U.Nakamaura <usa@garbagecollect.jp>