From: "U.Nakamura" <usa@...>
Date: 2012-10-12T20:43:24+09:00
Subject: [ANN] Ruby 1.9.3 patchlevel 286

Hi, all

Ruby 1.9.3-p286 is released.

This release includes some security fixes, and other many bug fixes.

* $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
  (CVE-2012-4464, CVE-2012-4466)
  You can see the detail via:
    http://www.ruby-lang.org/en/news/2012/10/12/cve-2012-4464-cve-2012-4466/

* Unintentional file creation caused by inserting a illegal NUL character
  You can see the detail via:
    http://preview.ruby-lang.org/en/news/2012/10/12/poisoned-NUL-byte-vulnerability

* other many bug fixes.

See ticktes
  https://bugs.ruby-lang.org/projects/ruby-193/issues?set_filter=1&status_id=5
and ChangeLog
  http://svn.ruby-lang.org/repos/ruby/tags/v1_9_3_286/ChangeLog
for details.


You can download this release from:

* ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p286.tar.bz2
  SIZE:   9961862 bytes
  MD5:    e76848a86606a4fd5dcf14fc4b4e755e
  SHA256: 5281656c7a0ae48b64f28d845a96b4dfa16ba1357a911265752787585fb5ea64

* ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p286.tar.gz
  SIZE:   12459652 bytes
  MD5:    e2469b55c2a3d0d643097d47fe4984bb
  SHA256: e94367108751fd6bce79401d947baa66096c757fd3a0856350a2abd05d26d89d

* ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p286.zip
  SIZE:   13906047 bytes
  MD5:    8b3c2d6bd306804ed198260e4f5b6418
  SHA256: 9d59c5885e66e6fbfbc49a2b6b80429141f8bdd2827747ec9a4eee7c2252b522


Regards,
-- 
U.Nakamura <usa@garbagecollect.jp>