Photo by JL2003 – CC 2.0 Attribution License
The official Ruby blog is reporting “multiple vulnerabilities” in the official Ruby interpreter (MRI). A significant number of versions are affected:
- All versions prior to 1.8.5
- All 1.8.5 versions prior to patch 231
- All 1.8.6 versions prior to patch 230
- All 1.8.7 versions prior to patch 22
- All 1.9.0 versions prior to 1.9.0-2
Jeremy Kemper, at the official Rails blog, advised upgrading immediately, but with the warning that Ruby 1.8.7 only works with Rails 2.1 and later. Numerous commenters, however, have noted significant issues with Rails applications once they’ve upgraded to Ruby 1.8.6p230 and 1.8.5p231. Read More