Vunerabilities discovered in Ruby

Posted by Nathan Kaiser on Mon Jun 23 11:44:00 UTC 2008

Drew Yao of Apple Product Security recently discovered and disclosed several critical vulnerabilities in Ruby which do affect all previously-released versions of Ruby. Starting immediately, over the next few days we’ll be updating the versions installed in our standard Rails stack, as well as those versions which may have been provided by our operating system vendor to revisions which are not vulnerable. We don’t anticipate this causing any problems for any customer-written ruby code.

As we update each system, we will need to restart ruby applications. We anticipate this will entail less than 5 seconds of down-time for each service. (For those of our customers with load-balanced services, this should entail no down time at all.) If you’d like to work with us to schedule a specific time to update the Ruby binary and libraries on your system, please open a support ticket with us.

You can read more about the vulnerabilities discovered here.

THE LATEST

THE ARCHIVES

THE FEED