Ruby 2.7.5 Released

[NewsBot]

A new Ruby blog post/announcement has been posted!

Ruby 2.7.5 has been released.

This release includes security fixes. Please check the topics below for details.

• CVE-2021-41817: Regular Expression Denial of Service Vulnerability of Date Parsing Methods
• CVE-2021-41816: Buffer Overrun in CGI.escape_html
• CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse

See the commit logs for details.

Download

• https://cache.ruby-lang.org/pub/ruby/2.7/ruby-2.7.5.tar.bz2

  <div class="language-plaintext highlighter-rouge"><div class="highlight"><pre...
  

Get the full details here: Ruby 2.7.5 Released

[bot]

Corresponding tweet for this thread:

Devtalk

Share link for this tweet.