Ruby 2.6.9 Released

[NewsBot]

A new Ruby blog post/announcement has been posted!

Ruby 2.6.9 has been released.

This release includes security fixes. Please check the topics below for details.

• CVE-2021-41817: Regular Expression Denial of Service Vulnerability of Date Parsing Methods
• CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse

See the commit logs for details.

Ruby 2.6 is now under the state of the security maintenance phase, until the end of March of 2022. After that date, maintenance of Ruby 2.6 will be ended. We recommend you start planning the migration to newer versions of Ruby, such as 3.0 or 2.7.

Download

• https://cache.ruby-lang.org/pub/ruby/2....

Get the full details here: Ruby 2.6.9 Released