ruby-list

Hello all.  This is a new release for 1.8.7 series.

As Yugui posted earlier, there is a XSS vulnerability in WEBrick HTTP server.
 Beware that, though we realized this issue only recently, the CVE-2010-0541
has been disclosed for months without notifying us, so public WEBrick servers
are already under a real threat of attacks.  Many thanks to Hideaki Yamane for
letting us know it.

Anyway we have a fix for the issue now, and here are those applied for the
1.8.7 branch.  All WEBrick users are encouraged to upgrade.

URLs:

ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.7-p301.tar.gz
ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.7-p301.tar.bz2
ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.7-p301.zip

Checksum:

MD5(ruby-1.8.7-p301.tar.gz)= 2c1a0c3d3d44e77c958e84ead26b1fc9
SHA256(ruby-1.8.7-p301.tar.gz)=
c9e3729fee37299348658c50222bc0317ea0a3cdd5abe6af60a5cb7e06f25edb
SIZE(ruby-1.8.7-p301.tar.gz)= 4867903

MD5(ruby-1.8.7-p301.tar.bz2)= f461d7672ee99de881f3e9fa5c76fae7
SHA256(ruby-1.8.7-p301.tar.bz2)=
6ddd929722d177240c52e9fafa637dae4d7f8a30825faabb33b1c5391b004029
SIZE(ruby-1.8.7-p301.tar.bz2)= 4183897

MD5(ruby-1.8.7-p301.zip)= 209f447e36207b5989f682008b31e7af
SHA256(ruby-1.8.7-p301.zip)=
591c9c6a4210698582fd14f18a715ce19d3a3e4578a7afad2c1e4e126e5cfb0c
SIZE(ruby-1.8.7-p301.zip)= 5965403

Thanks,

Attachments (1)

signature.asc (260 Bytes, application/pgp-signature)

Thread

Prev Next

In This Thread

Prev Next

[#47278] RejectKaigi 2010 開催のお知らせ [ 8月29日（日）] — "KOSHIBA Toshiaki(so-net)" <koshiba@...8.so-net.ne.jp>

[#47279] RubyKaigi2010 LTでのMacBook用モニタアダプターを貸していただける人を募集しています. — Sora Harakami <sora134@...>

[#47282] [ANN] RubyKaigi 2010 併催 キーサインパーティーのおさそい — Urabe Shyouhei <shyouhei@...>

[#47283] [ANN] RubyKaigi 2010 『MSWin32版Ruby野良ビルダー養成塾』 宣伝 — arton <artonx@...>

[#47284] Ruby committers Q&A at RubyKaigi — Shugo Maeda <shugo@...>

[#47285] make install後、config.hの置き場所について — Moru <lateau@...>

[#47288] [ANN] RubyConf 2010 の情報共有ML — Kakutani Shintaro <shintaro@...>

[#47290] 改行やタグを含むデータをmysqlでinsertするには — Yosuke Suzuki <yosuke.suzuki@...>

[#47298] スキップリストをリリースしました — "KISHIMOTO, Makoto" <ksmakoto@...4u.or.jp>

[#47299] Re: 改行やタグを含むデータをmysqlでinsertするには +追加 XMLの操作 — Yosuke Suzuki <yosuke.suzuki@...>

[#47300] [ANN] Ruby 1.9.1-p430 is out — "Yuki Sonoda (Yugui)" <yugui@...>

[#47301] [ANN][Security] Ruby 1.8.7 patchlevel 301 released (CVE-2010-0541) — Urabe Shyouhei <shyouhei@...>

[#47303] マッチしない正規表現「.*?」が遅い? — SATOH Fumiyasu <fumiyas@...>

[#47306] to_i — Mitsuyoshi Kawabata <kawabata@...>

[#47314] ruby on github and NonComitterHowto — masayoshi takahashi <maki@...>

[#47316] 拡張ライブラリ作成時のrb_gc_mark()の呼び出し方について — tueda <tueda@...>

[#47321] [ANN] Ruby 1.9.2リリース — "Yuki Sonoda (Yugui)" <yugui@...>

[#47323] 無欲マッチの使い方 — AOKI Yoshihiro <aoki@...>

[#47330] ftpファイル再配置のお願い — Tadashi Saito <shiba@...2.accsnet.ne.jp>

[#47331] 入れ子ブレースのマッチング — AOKI Yoshihiro <aoki@...>

[#47335] [ANN] rcairo 1.8.3 — Kouhei Sutou <kou@...>

[#47338] [ANN]hikidoc-0.0.5 — kimura wataru <kimuraw@...>

[#47339] [ANN] rcairo 1.8.5 — Kouhei Sutou <kou@...>

[#47340] GAEについて — "T.Soejima" <clev@...2.so-net.ne.jp>

[#47342] [ANN] rroonga 1.0.0 — Kouhei Sutou <kou@...>

[#47343] [ANN]MiyakoLauncherLite2.0.0 — cyross@...

[#47345] 「Rubyリファレンスマニュアル刷新計画」2010-08分のスナップショットリリース — okkez <okkez000@...>

[#47347] [ANN]Miyako2.1.16&MiyakoPack2.1.16リリース — cyross@...

[#47360] Ruby'sライセンスの、BSDLとのデュアルライセンスへの変更 — "NARUSE, Yui" <naruse@...>

[ruby-list:47301] [ANN][Security] Ruby 1.8.7 patchlevel 301 released (CVE-2010-0541)

Attachments (1)

Thread

In This Thread

[#47282] [ANN] RubyKaigi 2010 併催キーサインパーティーのおさそい — Urabe Shyouhei <shyouhei@...>

[#47283] [ANN] RubyKaigi 2010 『MSWin32版Ruby野良ビルダー養成塾』宣伝 — arton <artonx@...>

[#47299] Re: 改行やタグを含むデータをmysqlでinsertするには　+追加 XMLの操作 — Yosuke Suzuki <yosuke.suzuki@...>