Denial of service attack was found for Ruby's Hash algorithm (CVE-2011-4815)

Impact This is something related to computational complexity. Specially crafted series of strings that intentionally collide their hash values each other was found. With such...

Continue Reading...

Ruby 1.9.3 p0 is released

Ruby 1.9.3 p0 is released. This is the latest stable version of 1.9 series. See ChangeLogs and NEWS for the descriptions. Locations <URL:http://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p0.tar.bz2> SIZE: 9554576...

Continue Reading...

Upcoming Ruby Programming Competitions with Matz - Grand Prize - 1,000,000 JPY!

Dear Ruby Enthusiasts: The Government of Fukuoka, Japan together with "Matz" Matsumoto would like to invite you to enter the following Ruby competitions. If you...

Continue Reading...

Plans for 1.8.7

Hello, and thank you for your getting into our community. I know most of you more or less use version 1.8.7 of Ruby today. It...

Continue Reading...

Ruby 1.9.3 rc1 has been released

Ruby 1.9.3 rc1 has been released. This is a second preview of next version and there're still minor known issues. But it will be fixed...

Continue Reading...

ConFoo 2012: Call for Papers is Now Open!

We are looking for the best speakers willing to share their skills and experience with developers and managers. This year, ConFoo is dedicated to software...

Continue Reading...

Ruby 1.9.3 preview1 has been released

Ruby 1.9.3 preview1 has been released. This is a first preview of next version and there're still minor known issues. But it will be fixed...

Continue Reading...

Ruby 1.9.2-p290 is released

Ruby 1.9.2-p290 is released. This release doesn't include any security fixes, but many bugs are fixed in this release. See ChangeLog for details. Downloads <URL:http://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.2-p290.tar.bz2>...

Continue Reading...

Ruby 1.8.7-p352 released

Ruby 1.8.7 was released on June 1st, 2008. In commemoration of the third anniversary of Ruby 1.8.7, we have a new patchlevel release today. It...

Continue Reading...

Planned maintenance of redmine.ruby-lang.org

Ruby's issue tracker will be down from 2011-02-23 10:00+09:00 to 24:00 for planned maintenance. If you have any issue to report, I am afraid but...

Continue Reading...

FileUtils is vulnerable to symlink race attacks

A symlink race condition vulnerability was found in FileUtils.remove_entry_secure. The vulnerability allows local users to delete arbitrary files and directories. Affected versions Ruby 1.8.6 patchlevel...

Continue Reading...

Exception methods can bypass $SAFE

Exception#to_s method can be used to trick $SAFE check, which makes a untrusted codes to modify arbitrary strings. Detailed description In Ruby's $SAFE semantics, safe...

Continue Reading...