Posted by usa on 17 Oct 2018

Ruby 2.3.8 has been released.

This release includes several security fixes. Please check the topics below for details.

• CVE-2018-16396: Tainted flags are not propagated in Array#pack and String#unpack with some directives
• CVE-2018-16395: OpenSSL::X509::Name equality check does not work correctly

This release also includes a non-security fix to support Visual Studio 2014 with Windows 10 October 2018 Update for maintenance reasons.

Ruby 2.3 is now under the state of the security maintenance phase, until the end of March of 2019. After that date, maintenance of Ruby 2.3 will be ended. We recommend you start planning the migration to newer versions of Ruby, such as 2.5 or 2.4.

Download

• https://cache.ruby-lang.org/pub/ruby/2.3/ruby-2.3.8.tar.bz2

  SIZE:   14418609 bytes
  SHA1:   91b31abdba00a346c155fd32bd32d3cec3b73bc4
  SHA256: 4d1a3a88e8cf9aea624eb73843fbfc60a9a281582660f86d5e4e00870397407c
  SHA512: 6d79e0d25757fd37188a8db3e630a52539bce7927fcb779a2ce9a97b9e5f330753035c16843552f1a1fb6c9a1e5c0f916b3cc8b5c0bfe81e20f35f8442e40ae8
  

• https://cache.ruby-lang.org/pub/ruby/2.3/ruby-2.3.8.tar.gz

  SIZE:   17858806 bytes
  SHA1:   69311991a9cd2c8e3c86a0dbbaaf915ae91f0bec
  SHA256: b5016d61440e939045d4e22979e04708ed6c8e1c52e7edb2553cf40b73c59abf
  SHA512: 43b02f2f9de6baf281f09a49fd07367127b4de1fb14473380d06bfa7667990d8f722ae2d33cf7d15b02f7e799515f21aebd308897c4c2a5461ebab4049d6c7ef
  

• https://cache.ruby-lang.org/pub/ruby/2.3/ruby-2.3.8.tar.xz

  SIZE:   11465792 bytes
  SHA1:   9771acdad851bbf0ef349bb7da5d0ffc91a860ed
  SHA256: 910f635d84fd0d81ac9bdee0731279e6026cb4cd1315bbbb5dfb22e09c5c1dfe
  SHA512: 06373050e6c1af9cb6a5863aef878b21c8a45fd0e68414e3d546cb73ec3028207d3acc0a9326428f172b9347a30bbe69a16f9dc0bdb739161d677adb2d888095
  

• https://cache.ruby-lang.org/pub/ruby/2.3/ruby-2.3.8.zip

  SIZE:   19911652 bytes
  SHA1:   ad9e0ec7c874701832c9e224eb5b9e2258f3a041
  SHA256: ec9792d0473a22954ad25cd0c531fc672679c1a5eaeefa08caf9e1288852796f
  SHA512: 732d69cd55f1c273a02005306720fd8fc9d77398177db9509452be31820976b54b30319d9e6bc36fb6bcd7af656f807ef6c26d8955012c8b20424912a2f51bf8
  

Release Comment

Thanks to everyone who helped with this release.

Syndicate

Recent News (RSS)