From: Evan Phoenix <evan@...>
Date: 2012-04-22T05:57:52+09:00
Subject: [ANN] rubygems-update 1.8.23 Released

--4f931f4d_754342_84
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

rubygems-update version 1.8.23 has been released!

* <http://rubygems.org>
* <http://docs.rubygems.org>
* <http://help.rubygems.org>
* <http://github.com/rubygems>
* <http://rubyforge.org/projects/rubygems>

RubyGems is a package management framework for Ruby.

This gem is an update for the RubyGems software. You must have an
installation of RubyGems before this update can be applied.

See Gem for information on RubyGems (or `ri Gem`)

To upgrade to the latest RubyGems, run:

  $ gem update --system  # you might need to be an administrator or root

See UPGRADING.rdoc for more details and alternative instructions.

-----

If you don't have RubyGems installed, your can still do it manually:

* Download from: https://rubygems.org/pages/download
* Unpack into a directory and cd there
* Install with: ruby setup.rb  # you may need admin/root privilege

For more details and other options, see:

  ruby setup.rb --help

Changes:

### 1.8.23 / 2012-04-19

This release increases the security used when RubyGems is talking to
an https server. If you use a custom RubyGems server over SSL, this
release will cause RubyGems to no longer connect unless your SSL cert
is globally valid.

You can configure SSL certificate usage in RubyGems through the
:ssl_ca_cert and :ssl_verify_mode options in ~/.gemrc and /etc/gemrc.
The recommended way is to set :ssl_ca_cert to the CA certificate for
your server or a certificate bundle containing your CA certification.

You may also set :ssl_verify_mode to 0 to completely disable SSL
certificate checks, but this is not recommended.


* 2 security fixes:
  * Disallow redirects from https to http
  * Turn on verification of server SSL certs

* 1 minor feature:
  * Add --clear-sources to fetch

* 2 bug fixes:
  * Use File.identical? to check if two files are the same.
  * Fixed init_with warning when using psych


-- 
Evan Phoenix // evan@phx.io


--4f931f4d_754342_84
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline


                <div>
                    <div>rubygems-update version 1.8.23 has been released=
=21</div><div><br></div><div>* &lt;http://rubygems.org&gt;</div><div>* &l=
t;http://docs.rubygems.org&gt;</div><div>* &lt;http://help.rubygems.org&g=
t;</div><div>* &lt;http://github.com/rubygems&gt;</div><div>* &lt;http://=
rubyforge.org/projects/rubygems&gt;</div><div><br></div><div>RubyGems is =
a package management framework for Ruby.</div><div><br></div><div>This ge=
m is an update for the RubyGems software. You must have an</div><div>inst=
allation of RubyGems before this update can be applied.</div><div><br></d=
iv><div>See Gem for information on RubyGems (or =60ri Gem=60)</div><div><=
br></div><div>To upgrade to the latest RubyGems, run:</div><div><br></div=
><div>&nbsp; =24 gem update --system &nbsp;=23 you might need to be an ad=
ministrator or root</div><div><br></div><div>See UPGRADING.rdoc for more =
details and alternative instructions.</div><div><br></div><div>-----</div=
><div><br></div><div>If you don't have RubyGems installed, your can still=
 do it manually:</div><div><br></div><div>* Download from: https://rubyge=
ms.org/pages/download</div><div>* Unpack into a directory and cd there</d=
iv><div>* Install with: ruby setup.rb &nbsp;=23 you may need admin/root p=
rivilege</div><div><br></div><div>=46or more details and other options, s=
ee:</div><div><br></div><div>&nbsp; ruby setup.rb --help</div><div><br></=
div><div>Changes:</div><div><br></div><div>=23=23=23 1.8.23 / 2012-04-19<=
/div><div><br></div><div>This release increases the security used when Ru=
byGems is talking to</div><div>an https server. If you use a custom RubyG=
ems server over SSL, this</div><div>release will cause RubyGems to no lon=
ger connect unless your SSL cert</div><div>is globally valid.</div><div><=
br></div><div>You can configure SSL certificate usage in RubyGems through=
 the</div><div>:ssl=5Fca=5Fcert and :ssl=5Fverify=5Fmode options in =7E/.=
gemrc and /etc/gemrc.</div><div>The recommended way is to set :ssl=5Fca=5F=
cert to the CA certificate for</div><div>your server or a certificate bun=
dle containing your CA certification.</div><div><br></div><div>You may al=
so set :ssl=5Fverify=5Fmode to 0 to completely disable SSL</div><div>cert=
ificate checks, but this is not recommended.</div><div><br></div><div><br=
></div><div>* 2 security fixes:</div><div>&nbsp; * Disallow redirects fro=
m https to http</div><div>&nbsp; * Turn on verification of server SSL cer=
ts</div><div><br></div><div>* 1 minor feature:</div><div>&nbsp; * Add --c=
lear-sources to fetch</div><div><br></div><div>* 2 bug fixes:</div><div>&=
nbsp; * Use =46ile.identical=3F to check if two files are the same.</div>=
<div>&nbsp; * =46ixed init=5Fwith warning when using psych</div><div><br>=
</div>
                </div>
                <div><div><br></div><div>--&nbsp;</div><div>Evan Phoenix =
// evan=40phx.io</div><div><br></div></div>
            
--4f931f4d_754342_84--