Ruby 2.5.7 has been released.

This release includes security fixes as listed below.
Please check the topics below for details.

* [CVE-2019-16255: A code injection vulnerability of Shell#[] and Shell#test](/en/news/2019/10/01/code-injection-shell-test-cve-2019-16255/)
* [CVE-2019-16254: HTTP response splitting in WEBrick (Additional fix)](/en/news/2019/10/01/http-response-splitting-in-webrick-cve-2019-16254/)
* [CVE-2019-15845: A NUL injection vulnerability of File.fnmatch and File.fnmatch?](/en/news/2019/10/01/nul-injection-file-fnmatch-cve-2019-15845/)
* [CVE-2019-16201: Regular Expression Denial of Service vulnerability of WEBrick's Digest access authentication](/en/news/2019/10/01/webrick-regexp-digestauth-dos-cve-2019-16201/)

See the [commit log](https://github.com/ruby/ruby/compare/v2_5_6...v2_5_7) for details.

## Download



* <https://cache.ruby-lang.org/pub/ruby/2.5/ruby-2.5.7.tar.bz2>

      SIZE: 13794351
      SHA1: 51154b6bfed967b5acd7903790402172ced2563b
      SHA256: e67c69b141ed27158e47d9a4fe7e59749135b0f138dce06c8c15c3214543f56f
      SHA512: 7d6a7d41b4f3789f46be5f996099f3eb8321aa4778b2a8ff44142654e769ba4ba2df127dd0f267547e4c8cd6ff46364f18e79838df54fcd7e3fb714294ee0099

* <https://cache.ruby-lang.org/pub/ruby/2.5/ruby-2.5.7.tar.gz>

      SIZE: 15669771
      SHA1: 541039290d188fff683a1d2f2892bd74854dd022
      SHA256: 0b2d0d5e3451b6ab454f81b1bfca007407c0548dea403f1eba2e429da4add6d4
      SHA512: 6c4219e1ac316fb00cdd5ff2ac6292448e6ddf49f25eda91426f8e0072288e8849d5c623bf9d532b8e93997b23dddc24718921d92b74983aac8fdb50db4ee809

* <https://cache.ruby-lang.org/pub/ruby/2.5/ruby-2.5.7.tar.xz>

      SIZE: 11296440
      SHA1: dd6b2841334ee99250fdf6a29c4eda501df6be97
      SHA256: 201870e8f58957d542233fef588b1d76f7bf962fea44dcbd2237f4a5899a3f95
      SHA512: 63b7c75fab44cd1bd22f22ddec00c740cf379ac7240da0dfafcec54347766695faef47428ce1c433fd77fa96992e976c984697067fa526236d383b12adc9ce75

* <https://cache.ruby-lang.org/pub/ruby/2.5/ruby-2.5.7.zip>

      SIZE: 19051936
      SHA1: 2b761378ec667ca5980d37cb3c591bdf88c51e45
      SHA256: c56821bea150166c599195679c0629f8dfc16984aae0ed744bf306ef45abbd68
      SHA512: a5543a5b7dcee1d92c4edd874b1be92d5451402ce1320cc5c8f49188fa2243d70413f31b9e5cce7f434f1f37e6f8c3aef1be5407e5075eacbd7ca6836c67e6e3

## Release Comment

Thanks to everyone who helped with this release.

The maintenance of Ruby 2.5, including this release, is based on the "Agreement for the Ruby stable version" of the Ruby Association.