Hi, all
We've just released Ruby 3.2.2, 3.1.4, 3.0.6 and 2.7.8.
How to download and details:
* [Ruby 3.2.2 Released](Ruby 3.2.2 Released)
* [Ruby 3.1.4 Released](Ruby 3.1.4 Released)
* [Ruby 3.0.6 Released](Ruby 3.0.6 Released)
* [Ruby 2.7.8 Released](Ruby 2.7.8 Released)
They includes secuirty fixes.
You can check details:
* [CVE-2023-28755: ReDoS vulnerability in URI](CVE-2023-28755: ReDoS vulnerability in URI)
* [CVE-2023-28756: ReDoS vulnerability in Time](CVE-2023-28756: ReDoS vulnerability in Time)
We strongly recommend to upgrade your ruby installations as soon as possible.
Note:
After this release, Ruby 2.7 reaches EOL. In other words, this is expected to be the last release of Ruby 2.7 series.
And also, we end the normal maintenance phase of Ruby 3.0, and Ruby 3.0 enters the security maintenance phase.
Therefore, we recommend to start migration to Ruby 3.2 or 3.1.
Regards,
ยทยทยท
--
U.Nakamaura <usa@garbagecollect.jp>
______________________________________________
ruby-talk mailing list -- ruby-talk@ml.ruby-lang.org
To unsubscribe send an email to ruby-talk-leave@ml.ruby-lang.org
ruby-talk info -- Info | ruby-talk@ml.ruby-lang.org - ml.ruby-lang.org