Posted by usa on 7 Jul 2021
Ruby 2.7.4 has been released.
This release includes security fixes. Please check the topics below for details.
- CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP
- CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP
- CVE-2021-31799: A command injection vulnerability in RDoc
See the commit logs for details.
Download
-
https://cache.ruby-lang.org/pub/ruby/2.7/ruby-2.7.4.tar.bz2
SIZE: 14804934 SHA1: f5bdecded2d68e4f2f0ab1d20137e8b4b0614e52 SHA256: bffa8aec9da392eda98f1c561071bb6e71d217d541c617fc6e3282d79f4e7d48 SHA512: f144c32c9cb0006dfcfa7d297f83f88b881f68c94f0130346c74dfd8758583a68d22accfd0fc9f31db304ab5ff0bc135bfb2868145c0dec1ee6cec5ac6c3725d -
https://cache.ruby-lang.org/pub/ruby/2.7/ruby-2.7.4.tar.gz
SIZE: 16915699 SHA1: 86ec4a97bc43370050b5aef8d6ea3ed3938fb344 SHA256: 3043099089608859fc8cce7f9fdccaa1f53a462457e3838ec3b25a7d609fbc5b SHA512: a317752e9a32c8d1261e67ca89c396722ee779ec8ba4594987812d065b73751f51485a1ede8044aae14b3b16e8d049c6953cef530ae1b82abb135b446c653f8a -
https://cache.ruby-lang.org/pub/ruby/2.7/ruby-2.7.4.tar.xz
SIZE: 12067588 SHA1: 6e044d835f9f432cfa9441241c1ef66e3d607cbf SHA256: 2a80824e0ad6100826b69b9890bf55cfc4cf2b61a1e1330fccbcb30c46cef8d7 SHA512: 2cbb70ecfdd69120e789023ddb2b25cab0d03bc33fdc367a8f74ca8a3ee785c18c8ded9de3ecee627c7e275ffb85147e6abf921b6a61e31851b37c7fedf45bf9 -
https://cache.ruby-lang.org/pub/ruby/2.7/ruby-2.7.4.zip
SIZE: 20701195 SHA1: 32bdd5288dcc1e531832c14d26ff7cd218b55bc3 SHA256: a4fe29bfc6a8338fe4b017705aa9d3358225ea305359520d4995096a4382034e SHA512: 2877b809bafe72cba789add85993a1954008012afcfb5fc4645e482478479bb02166b0d5ee12263983a6c828e6970eb1385632409793dcbc5185d7bbc9c4f349
Release Comment
Many committers, developers, and users who provided bug reports helped us make this release. Thanks for their contributions.
The maintenance of Ruby 2.7, including this release, is based on the “Agreement for the Ruby stable version” of the Ruby Association.