Software-update: Ruby 2.5.3 / 2.4.5 / 2.3.8

Ruby is een programmeertaal om snel en makkelijk objectgeoriënteerd te programmeren. Het werd op 24 februari 1993 in het leven geroepen door Yukihiro 'Matz' Matsumoto en uitgebracht in 1995. Ruby is afgeleid van het Engelse woord voor robijn, een woordspeling op Perl. De auteur zegt dat hij Ruby gemaakt heeft om 'het principe van de minste verrassing' te volgen, waarmee hij bedoelt dat de taal vrij moet zijn van de angels en voetklemmen die andere talen teisteren. Enkele dagen geleden zijn nieuwe versies uitgebracht om de beveiliging te verbeteren. De versienummers zijn vastgezet op 2.5.3, 2.4.5 en 2.3.8, en voorzien van de volgende aankondigingen:

Ruby 2.5.3 Released

There were some missing files in the release packages of 2.5.2 which are necessary for building. See details in [Bug #15232].

This release is just for fixing the packaging issue. This release doesn’t contain any additional bug fixes from 2.5.2.

Ruby 2.5.2 Released

This release includes some bug fixes and some security fixes.

• CVE-2018-16396: Tainted flags are not propagated in Array#pack and String#unpack with some directives
• CVE-2018-16395: OpenSSL::X509::Name equality check does not work correctly

There are also some bug fixes. See commit logs for more details.

Ruby 2.4.5 Released

This release includes about 40 bug fixes after the previous release, and also includes several security fixes. Please check the topics below for details.

• CVE-2018-16396: Tainted flags are not propagated in Array#pack and String#unpack with some directives
• CVE-2018-16395: OpenSSL::X509::Name equality check does not work correctly

See the commit logs for details.

Ruby 2.3.8 Released

This release includes several security fixes. Please check the topics below for details.

• CVE-2018-16396: Tainted flags are not propagated in Array#pack and String#unpack with some directives
• CVE-2018-16395: OpenSSL::X509::Name equality check does not work correctly

This release also includes a non-security fix to support Visual Studio 2014 with Windows 10 October 2018 Update for maintenance reasons.

Ruby 2.3 is now under the state of the security maintenance phase, until the end of the March of 2019. After the date, maintenance of Ruby 2.3 will be ended. We recommend you start planning migration to newer versions of Ruby, such as 2.5 or 2.4.

Versienummer	2.5.3 / 2.4.5 / 2.3.8
Releasestatus	Final
Besturingssystemen	Windows 7, Linux, BSD, macOS, Solaris, UNIX, Windows Server 2008, Windows Server 2012, Windows 8, Windows 10, Windows Server 2016
Website	Ruby
Download	https://www.ruby-lang.org/en/downloads/
Licentietype	Freeware