Ruby 2.2.3/2.1.7/2.0.0-p647 ,这三个版本都包括一个 RubyGems 的域名验证漏洞的安全修补程序,细节如下:
CVE-2015-3900 Request hijacking vulnerability in RubyGems 2.4.6 and earlier
此外,2.0.0-p647 版本还包括对 lib/resolv.rb 回退的修复:
Uninitialized constant bug introduced by typo in backport of [#10712]
软件详情:https://www.ruby-lang.org/en/news/2015/08/18/ruby-2-2-3-released/
下载地址:http://git.oschina.net/mirrors/ruby
来自:开源中国社区

