Posted by naruse on 23 Apr 2024

Ruby 3.3.1 has been released.

This release includes security fixes. Please check the topics below for details.

• CVE-2024-27282: Arbitrary memory address read vulnerability with Regex search
• CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc
• CVE-2024-27280: Buffer overread vulnerability in StringIO

See the GitHub releases for further details.

Download

• https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.1.tar.gz

  SIZE: 22074535
  SHA1: affd82947d7cd84bd586f7f487a1da0c0bd8b1fd
  SHA256: 8dc2af2802cc700cd182d5430726388ccf885b3f0a14fcd6a0f21ff249c9aa99
  SHA512: 0c8ea922a79152ac7adbfb2541320565bce6a631692fd39d499a06f53ad6339c16fad8374d171351ed63f7bda3312b26d4f8c058c5b6df3d7548fde372c718f1
  

• https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.1.tar.xz

  SIZE: 16350792
  SHA1: 88ef585faece4ed76f4330bce52903664d4fbfe0
  SHA256: 0686941a3ec395a15ae2a852487b2a88e5fb8a5518e188df00d8d1bb71a6349b
  SHA512: c58e9be9b5ab48191fbf7d67e13f0ec42ee71ed338170e0f7b246708e9cfc617ce65098f5ce7ab32d4305e785642d3e44253462104d5b9c4abcb1a4113f48347
  

• https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.1.zip

  SIZE: 26953741
  SHA1: 98b9858e3c125cfe6ca838ac4e4e269fa34bcaaa
  SHA256: d81c99dd03d095f116361c9d097145666f7bb2512cd856ee086545b1c3e54c55
  SHA512: 200bfcc1cc11282c64b03fe529287509684e01266d248ec85f51f6b382beebd8324321c2db59f52185f42c49fdde84aaa42cb59f0048faca389985431224564d
  

Release Comment

Many committers, developers, and users who provided bug reports helped us make this release. Thanks for their contributions.

Syndicate

Recent News (RSS)