[#9722] Kernel#system broken inside Dir.chdir(&block) if system command doesn't have shell characters — <noreply@...>

Bugs item #7278, was opened at 2006-12-14 13:59

8 messages 2006/12/14

[#9749] System V IPC in standard library? — Steven Jenkins <steven.jenkins@...>

Back in August, I needed a semaphore to serialize access to an external

14 messages 2006/12/19

[#9753] CVS freeze — SASADA Koichi <ko1@...>

Hi,

20 messages 2006/12/20
[#9755] Re: [ruby-dev:30039] CVS freeze — SASADA Koichi <ko1@...> 2006/12/20

Hi,

[#9757] Re: [ruby-dev:30040] Re: CVS freeze — SASADA Koichi <ko1@...> 2006/12/20

Hi,

Re: Request MD5 for ruby185-21.exe (Win32 distribution)

From: "Jan Svitok" <jan.svitok@...>
Date: 2006-12-18 21:49:54 UTC
List: ruby-core #9744
On 12/18/06, Amanda Waltman <Amanda.Waltman@noaa.gov> wrote:
> Hello
> Will you please send me the md5sum for file: ruby185-21.exe?  Also, will
> this version fix the current cgi.rb (DoS) vulnerability?  I have a user
> who is wanting to download & try out Ruby on his Windows platform.
> Thanks for your attention.
> Amanda

Hi,

At [1] you can find the md5 (I haven't checked its correctness, but
nobody complained yet ;-)

The 185-21.exe one-click installer contains the original 1.8.5 version
of ruby that doesn't contain the fix. There is a new ruby version
1.8.5-p11 in the testing. It will be released after sometime if no
problems are found. After that, it will take some time to update the
one-click installer.

Other than waiting for the new release, you can:

- patch it yourself after installation
- use the vanilla ruby from ruby-lang without the installer and
extensions (there is one for 1.8.5-p2 [2]
- build the oneclick yourself. You'll need VC6 (or mingw) to do that.
just get the sources, and follow the readme.

[1] http://rubyforge.org/frs/?group_id=167
[2] ftp://ftp.ruby-lang.org/pub/ruby/binaries/mswin32/ruby-1.8.5-p2-i386-mswin32.zip

In This Thread

Prev Next