Ruby 2.0.0-p647 Released

[André Arko]

We are pleased to announce the release of Ruby 2.0.0-p647.

This release includes the security fix for a RubyGems domain name verification vulnerability. Please view the topic below for more details.

• CVE-2015-3900 Request hijacking vulnerability in RubyGems 2.4.6 and earlier

And, this release also includes the fix for a regression of lib/resolv.rb.

• Uninitialized constant bug introduced by typo in backport of [#10712]

Ruby 2.0.0 is now under the state of the security maintenance phase, until Feb. 24th, 2016. After the date, maintenance of Ruby 2.0.0 will be ended. We recommend you start planning migration to newer versions of Ruby, such as 2.1 or 2.2.

Download

• http://ift.tt/1gUkgQf

  SIZE:   10785285 bytes
  SHA1:   537f0e212e337022f28ead8e67ffc834fcd468c6
  SHA256: 3c3782e313d1ec3ed06c104eafd133cc54ff5183b991786ece9e957fd6cf1cb9
  SHA512: 3416af771ebb0b27ceacf23d309bd2a1ede832c2edf48a5ca46f0b0b84b2ab94fb6362a0c7fe4f77b21253539db8161ae26d23a78d1ba729bf03812454d93d04
  

• http://ift.tt/1Nhizda

  SIZE:   13621258 bytes
  SHA1:   1d5f2748104cb1011d2888d5ca6ecdb3bee1115a
  SHA256: c88aaf5b4ec72e2cb7d290ff854f04d135939f6134f517002a9d65d5fc5e5bec
  SHA512: 988b694dc05a9b94b3626587abdb5c7bb6bd64e20c9f0cae1cfdab40896358696077ef975fbdfc6bcd0c108a21b9529d8f384df49902d3bc3c5cd0d640c5ac99
  

• http://ift.tt/1gUkiYl

  SIZE:   8301008 bytes
  SHA1:   4b7d395e9e0d097be948718dde115f977f3730e1
  SHA256: 9f793880df1209ea4e5c10ee9d8ef79caa0e73ee769f745f1c191505255e2847
  SHA512: 38fd2ad631588a0e8adf9a7ae01cb5274eca4fd794c5ed7030e5fae9e53cd8920eaac9d388c73b844a154c7eb56fa6fed8e2ee5df5617efd624b6a568ea4953b
  

• http://ift.tt/1NhiAxN

  SIZE:   15139508 bytes
  SHA1:   74bb7a18b18f8c2401abe14fc925124357e0740c
  SHA256: 788c34fa034088bc49b9a0c622a0d81e0b0c6dd0f993c2cacf3b839fce8d4780
  SHA512: 251737a35562b96813e5418c1fa1ff213147818e21af26d079714236d1a1e0eaf29f58b92bb8aae6cecc4be825630bb0a203270d828b909a60b120265523f062
  

Release Comment

Thanks to everyone who helped with this release, especially, hsbt.

Posted by usa on 18 Aug 2015