Ruby 2.5.8 Released

Posted by usa on 31 Mar 2020

Ruby 2.5.8 has been released.

This release includes security fixes. Please check the topics below for details.

• CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON (Additional fix)
• CVE-2020-10933: Heap exposure vulnerability in the socket library

See the commit logs for details.

Download

• https://cache.ruby-lang.org/pub/ruby/2.5/ruby-2.5.8.tar.bz2

  SIZE: 13801410
  SHA1: 823b6b009a6e44fef27d2dacb069067fe355d5d8
  SHA256: 41fc93731ad3f3aa597d657f77ed68fa86b5e93c04dfbf7e542a8780702233f0
  SHA512: 037a5a0510d50b4da85f081d934b07bd6e1c9b5a1ab9b069b3d6eb131ee811351cf02b61988dda7d7aa248aec91612a58d00929d342f0b19ddd7302712caec58
  

• https://cache.ruby-lang.org/pub/ruby/2.5/ruby-2.5.8.tar.gz

  SIZE: 15682927
  SHA1: 71e7b22d1dfa32d3df0bfeec48237b28a53bc04f
  SHA256: 6c0bdf07876c69811a9e7dc237c43d40b1cb6369f68e0e17953d7279b524ad9a
  SHA512: ec8bf18b5ef8bf14a568dfb50cbddcc4bb13241f07b0de969e7b60cc261fb4e08fefeb5236bcf620bc690af112a9ab7f7c89f5b8a03fd3430e58804227b5041f
  

• https://cache.ruby-lang.org/pub/ruby/2.5/ruby-2.5.8.tar.xz

  SIZE: 11298404
  SHA1: d5ef8e8f28c098e6b7ea24924e0b0fee6e2f766c
  SHA256: 0391b2ffad3133e274469f9953ebfd0c9f7c186238968cbdeeb0651aa02a4d6d
  SHA512: 2886be764a454425c5beef2777c64a70ee0d048b07896b327633d904f5077fea4299526689f9e2ac4dcd2fc4811cf9a6c8ce75367ed35d29dfe1a54222872e0d
  

• https://cache.ruby-lang.org/pub/ruby/2.5/ruby-2.5.8.zip

  SIZE: 19060404
  SHA1: 623786f2b30e61f0e78e2b0bb2d98f0f029dc305
  SHA256: 69d97164f12f85cef34ef9d2eac0f3fd40400bffb29ddd58193225bd23220ae2
  SHA512: 6a02ff090d2463fdb8cb9f4f072cc7d14d467731bf2eb28780fe714176e5abb3a169b6d007f76bd1c7e86517d11e93edea6a9e76d1a0ba97c7ac60dc5b235bdc
  

Release Comment

Thanks to everyone who helped with this release, especially, to reporters of the vulnerability.