[#44036] [ruby-trunk - Feature #6242][Open] Ruby should support lists — "shugo (Shugo Maeda)" <redmine@...>

20 messages 2012/04/01

[#44084] [ruby-trunk - Bug #6246][Open] 1.9.3-p125 intermittent segfault — "jshow (Jodi Showers)" <jodi@...>

22 messages 2012/04/02

[#44156] [ruby-trunk - Feature #6265][Open] Remove 'useless' 'concatenation' syntax — "rosenfeld (Rodrigo Rosenfeld Rosas)" <rr.rosas@...>

45 messages 2012/04/06

[#44163] [ruby-trunk - Bug #6266][Open] encoding related exception with recent integrated psych — "jonforums (Jon Forums)" <redmine@...>

10 messages 2012/04/06

[#44303] [ruby-trunk - Feature #6284][Open] Add composition for procs — "pabloh (Pablo Herrero)" <pablodherrero@...>

57 messages 2012/04/12

[#44349] [ruby-trunk - Feature #6293][Open] new queue / blocking queues — "tenderlovemaking (Aaron Patterson)" <aaron@...>

10 messages 2012/04/13

[#44402] [ruby-trunk - Feature #6308][Open] Eliminate delegation from WeakRef — "headius (Charles Nutter)" <headius@...>

20 messages 2012/04/17

[#44403] [ruby-trunk - Feature #6309][Open] Add a reference queue for weak references — "headius (Charles Nutter)" <headius@...>

15 messages 2012/04/17

[#44533] [ruby-trunk - Bug #6341][Open] SIGSEGV: Thread.new { fork { GC.start } }.join — "rudolf (r stu3)" <redmine@...>

24 messages 2012/04/22

[#44630] [ruby-trunk - Feature #6361][Open] Bitwise string operations — "MartinBosslet (Martin Bosslet)" <Martin.Bosslet@...>

31 messages 2012/04/26

[#44648] [ruby-trunk - Feature #6367][Open] #same? for Enumerable — "prijutme4ty (Ilya Vorontsov)" <prijutme4ty@...>

16 messages 2012/04/26

[#44704] [ruby-trunk - Feature #6373][Open] public #self — "trans (Thomas Sawyer)" <transfire@...>

61 messages 2012/04/27

[#44748] [ruby-trunk - Feature #6376][Open] Feature lookup and checking if feature is loaded — "trans (Thomas Sawyer)" <transfire@...>

13 messages 2012/04/28

[ruby-core:44481] Ruby 1.9.3-p194 is released

From: "NARUSE, Yui" <naruse@...>
Date: 2012-04-20 03:35:47 UTC
List: ruby-core #44481
Ruby 1.9.3-p194 is released.

This release include Security Fix for RubyGems: SSL server
verification failure for remote repository. And many bugs are fixed in
this release.

http://www.ruby-lang.org/en/news/2012/04/20/ruby-1-9-3-p194-is-released/

== Security Fix for RubyGems: SSL server verification failure for
remote repository

This release includes two security fixes in RubyGems.

Turn on verification of server SSL certs
Disallow redirects from https to http
Users who uses https source in .gemrc or /etc/gemrc are encouraged to
upgrade to 1.9.3-p194.

Following is excerpted from RubyGems 1.8.23 release note [1].

"This release increases the security used when RubyGems is talking to
an https server. If you use a custom RubyGems server over SSL, this
release will cause RubyGems to no longer connect unless your SSL cert
is globally valid.

You can configure SSL certificate usage in RubyGems through the
:sslca_cert and :sslverify_mode options in ~/.gemrc and /etc/gemrc.
The recommended way is to set :ssl_ca_cert to the CA certificate for
your server or a certificate bundle containing your CA certification.

You may also set :sslverifymode to 0 to completely disable SSL
certificate checks, but this is not recommended."

Credit to John Firebaugh for reporting this issue.

[1] https://github.com/rubygems/rubygems/blob/1.8/History.txt

== Fixes

Security Fix for RubyGems: SSL server verification failure for remote repository
other bug fixes
See tickets and ChangeLog for details.

== Downloads

http://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p194.tar.bz2

SIZE: 9841223 bytes
MD5: 2278eff4cfed3cbc0653bc73085caa34
SHA256: a9d1ea9eaea075c60048369a63b35b3b5a06a30aa214a3d990e0bb71212db8fa
http://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p194.tar.gz

SIZE: 12432239 bytes
MD5: bc0c715c69da4d1d8bd57069c19f6c0e
SHA256: 46e2fa80be7efed51bd9cdc529d1fe22ebc7567ee0f91db4ab855438cf4bd8bb
http://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p194.zip

SIZE: 13898712 bytes
MD5: 77e67b15234e442d4a3dcc450bc70fea
SHA256: 77474cfb92385b3a0b4c346553048bc65bfe68d4f220128329671a0234cb124d

-- 
NARUSE, Yui naruse@airemix.jp>

In This Thread

Prev Next