From: Cali Wildman Date: 2008-07-01T07:46:38+09:00 Subject: Re: Ruby patch level Jano Svitok wrote: > On Mon, Jun 30, 2008 at 19:39, Cali Wildman > wrote: >> >> * All versions prior to 1.8.5 >> * All 1.8.5 versions prior to patch 231 >> * All 1.8.6 versions prior to patch 230 >> * All 1.8.7 versions prior to patch 22 >> * All 1.9.0 versions prior to 1.9.0-2 >> >> I am thinking that my version of Ruby predates PATCHLEVEL var? If so, is >> there a way to perhaps correlate the date of the Ruby package with a >> patch level? Thanks in advance for your help. > > If you installed your ruby from one-click installer, it's vulnerable > (There's no OCI for p231 yet, and most probably never will be) > If you installed your ruby more than two weeks ago, it's vulnerable > (I.e. your ruby must be newer than the annoucement). > Note that some of the versions you listed are broken, so please read > through recent posts to determine which version do you really want. > > J. Thanks Jano, that's helpful, my Ruby installation was from Jan 2007 so it's vulnerable. I will read through the recent posts to determine the appropriate version. -- Posted via http://www.ruby-forum.com/.