A new Ruby 1.9.1 release, Ruby 1.9.1-p376 is out.
Everyone using Ruby 1.9.1 should consider upgrading to p376 because it contains a fix for a heap overflow vulnerability:
There is a heap overflow vulnerability in String#ljust, String#center and String#rjust. This has allowed an attacker to run arbitrary code in some rare cases.
The bug is in rb_str_justify, more details about the bug are available. The vulnerability only exists on 1.9.1.
1.9.1-p376 also brings many bug fixes for other problems, details from the 1.9.1-p376 release notes:
* Irb extension commands had been broken. It was fixed.
* Ripper had not been able to parse some Ruby codes. It was fixed.
* Fixed build failures on AIX.
* Some bug fixes of Matrix.
* Can load gems which is installed in an user's home directory.
* Some method became returning a string with a correct encoding.
Meanwhile, work on Ruby 1.9.2 is progressing (Changelog for the Ruby 1.9 trunk (Caution: large file)). Ruby 1.9.2 was delayed earlier this year to make sure it actually complies with RubySpec tests.
/filters:no_upscale()/sponsorship/topic/0f7f2cd2-6d32-4240-969e-49e206af4abc/AzulWebinarRSB-1631525398254.jpg)
/articles/crystal-ruby-c-compiled-typed/en/smallimage/crystal-ready-for-production-small-1619680232611.jpg)
/articles/diversity-cybersecurity/en/smallimage/logo-1631176160958.jpg){kind=logo}
/presentations/security-infrastructure-sentinel/en/smallimage/Tracy-Holmes-Developer-Advocate-HashiCorp-s-1628156515247.jpg)
/articles/netops-secops-closing-gap/en/smallimage/bridge-the-gap-NetOps-SecOps-network-management-security-small-image-1627039022447.jpg)
/presentations/netflix-adaptive-security/en/smallimage/netflix-adaptive-security-s-1625059351292.jpg)
/presentations/osint/en/smallimage/joe_gray-s-1619469978043.jpg)
/minibooks/modern-data-engineering/en/smallimage/LOGO-1631713323680.jpg){kind=logo}
/articles/reset-team-sprint-0/en/smallimage/logo-1631683156216.jpg){kind=logo}
/articles/ballerina-cloud-native-programming/en/smallimage/-C2PlY3M-1631543404121.jpg)
/articles/soft-skills-rempte/en/smallimage/logo-1631562349399.jpg){kind=logo}
/articles/service-mesh-ultimate-guide-2e/en/smallimage/logo-1630968100375.jpg){kind=logo}
/articles/reduce-technical-debt/en/smallimage/logo-1630929110479.jpg){kind=logo}
/articles/why-how-upgrade-java17/en/smallimage/upgrade-to-java-16-or-17-small-image-1630333858357.jpg)
/presentations/devops-monitoring-observability-methods/en/smallimage/infoq-live-logo-s-1630660086810.jpg){kind=logo}
/articles/team-performance-learning/en/smallimage/logo-1630664120015.jpg){kind=logo}
Community comments
a good news for Ruby 1.9.1
by bb Ghost,
a good news for Ruby 1.9.1
by bb Ghost,
Your message is awaiting moderation. Thank you for participating in the discussion.
a good news for Ruby1.9.1!i will change it now!