Ruby all versions changelog
Ruby 3.3
Ruby 3.3.3
Ruby 3.3.2
Ruby 3.3.1
-
CVE CVE-2024-27282: Arbitrary memory address read vulnerability w..
-
CVE CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc..
-
CVE CVE-2024-27280: Buffer overread vulnerability in StringIO..
Ruby 3.3.0
- Internals Introduced Prism parser as a default gem
- Internals Lrama replaces Bison as parser generator
- Internals Major YJIT performance improvements, introduction of RJIT
- Internals Introduction of M:N thread scheduler
- Internals Several performance improvements in the Garbage Collector
- Internals Enhancements in IRB: advanced irb:rdbg integration; pager support
Ruby 3.2
Ruby 3.2.4
-
CVE CVE-2024-27282: Arbitrary memory address read vulnerability w..
-
CVE CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc..
-
CVE CVE-2024-27280: Buffer overread vulnerability in StringIO..
Ruby 3.2.3
Ruby 3.2.2
Ruby 3.2.1
Ruby 3.2.0
- Internals WASI based WebAssembly support
- Internals Production-ready YJIT
- Internals Regexp improvements against ReDoS
- Internals IRB improvements (SyntaxSuggest, ErrorHighlight)
- Internals Bundler 2.4 now uses PubGrub resolver instead of Molinillo
Ruby 3.1
Ruby 3.1.6
Ruby 3.1.5
-
CVE CVE-2024-27282: Arbitrary memory address read vulnerability w..
-
CVE CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc..
-
CVE CVE-2024-27280: Buffer overread vulnerability in StringIO..
Ruby 3.1.4
Ruby 3.1.3
Ruby 3.1.2
Ruby 3.1.1
Ruby 3.1.0
- Added debug gem: A new debugger
- Added error_highlight: Fine-grained error location in backtrace
- Added IRB Autocomplete and Documentation Display
- Updated Values in Hash literals and keyword arguments can be omitted.
- Updated Updates in RBS / TypeProf
- Internals YJIT: New experimental in-process JIT compiler (experimental)
Ruby 3.0
Ruby 3.0.7
-
CVE CVE-2024-27282: Arbitrary memory address read vulnerability w..
-
CVE CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc..
-
CVE CVE-2024-27280: Buffer overread vulnerability in StringIO..
Ruby 3.0.6
Ruby 3.0.5
Ruby 3.0.4
Ruby 3.0.3
-
CVE CVE-2021-41817: Regular Expression Denial of Service Vulnerab..
-
CVE CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse..
Ruby 3.0.2
-
CVE CVE-2021-31810: Trusting FTP PASV responses vulnerability in ..
-
CVE CVE-2021-32066: A StartTLS stripping vulnerability in Net::IM..
-
CVE CVE-2021-31799: A command injection vulnerability in RDoc..
Ruby 3.0.1
Ruby 3.0.0
- Added Ractor - Actor-model like concurrent abstraction (experimental)
- Added Fiber Scheduler for light-weight concurrency (experimental)
- Added RBS - a language to describe the structure of Ruby classes
- Added TypeProf - type analysis tool, generates RBS type signatures (experimental)
- Added
Hash#except
- Updated Keyword arguments are separated from other arguments
- Updated Rightward assignment statement
- Updated Reversed (again) order of backtrace (experimental)
- Updated Endless method definition
def square(x) = x * x
- Internals MJIT improvements
Ruby 2.7
Ruby 2.7.8
Ruby 2.7.7
Ruby 2.7.6
Ruby 2.7.5
-
CVE CVE-2021-41817: Regular Expression Denial of Service Vulnerab..
-
CVE CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse..
Ruby 2.7.4
-
CVE CVE-2021-31810: Trusting FTP PASV responses vulnerability in ..
-
CVE CVE-2021-32066: A StartTLS stripping vulnerability in Net::IM..
-
CVE CVE-2021-31799: A command injection vulnerability in RDoc..
Ruby 2.7.3
Ruby 2.7.2
Ruby 2.7.1
-
CVE CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON ..
-
CVE CVE-2020-10933: Heap exposure vulnerability in the socket lib..
Ruby 2.7.0
- Added Pattern Matching (experimental)
- Updated REPL improvements
- Updated Separation of positional and keyword arguments
- Updated Argument forwarding
- Internals Compaction GC
Ruby 2.6
Ruby 2.6.10
Ruby 2.6.9
-
CVE CVE-2021-41817: Regular Expression Denial of Service Vulnerab..
-
CVE CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse..
Ruby 2.6.8
-
CVE CVE-2021-31810: Trusting FTP PASV responses vulnerability in ..
-
CVE CVE-2021-32066: A StartTLS stripping vulnerability in Net::IM..
-
CVE CVE-2021-31799: A command injection vulnerability in RDoc..
Ruby 2.6.7
Ruby 2.6.6
-
CVE CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON ..
-
CVE CVE-2020-10933: Heap exposure vulnerability in the socket lib..
Ruby 2.6.5
-
CVE CVE-2019-16255: A code injection vulnerability of Shell#[] an..
-
CVE CVE-2019-16254: HTTP response splitting in WEBrick (Additiona..
-
CVE CVE-2019-15845: A NUL injection vulnerability of File.fnmatch..
-
CVE CVE-2019-16201: Regular Expression Denial of Service vulnerab..
Ruby 2.6.4
Ruby 2.6.3
Ruby 2.6.2
Ruby 2.6.1
Ruby 2.6.0
- Added endless ranges
(1..)
- Added
Enumerable#chain
- Added function composition operators
<<, >>
toProc
- Updated
#then
alias for#yield_self
- Internals JIT compiler
--jit
- Internals Bundler is installed as a default gem
Ruby 2.5
Ruby 2.5.9
Ruby 2.5.8
-
CVE CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON ..
-
CVE CVE-2020-10933: Heap exposure vulnerability in the socket lib..
Ruby 2.5.7
-
CVE CVE-2019-16255: A code injection vulnerability of Shell#[] an..
-
CVE CVE-2019-16254: HTTP response splitting in WEBrick (Additiona..
-
CVE CVE-2019-15845: A NUL injection vulnerability of File.fnmatch..
-
CVE CVE-2019-16201: Regular Expression Denial of Service vulnerab..
Ruby 2.5.6
Ruby 2.5.5
Ruby 2.5.4
Ruby 2.5.3
Ruby 2.5.2
-
CVE CVE-2018-16396: Tainted flags are not propagated in Array#pac..
-
CVE CVE-2018-16395: OpenSSL::X509::Name equality check does not w..
Ruby 2.5.1
-
CVE CVE-2018-6914: Unintentional file and directory creation with..
-
CVE CVE-2018-8779: Unintentional socket creation by poisoned NUL ..
-
CVE CVE-2018-8780: Unintentional directory traversal by poisoned ..
Ruby 2.5.0
- Added
yield_self
- Added
rescue
in blocks - Added
Hash#slice
andHash#transform_keys
- Added
ERB#result_with_hash
- Updated New
Array
aliases -#prepend (#unshift)
and#append (#push)
- Updated Pattern argument on
Enumerable
methods - Updated Keyword arguments on
Struct.new
- Updated Removed Top-level constant lookup
- Updated Reverse order of backtrace (oldest call first) (experimental)
Ruby 2.4
Ruby 2.4.10
Ruby 2.4.9
Ruby 2.4.8
-
CVE CVE-2019-16255: A code injection vulnerability of Shell#[] an..
-
CVE CVE-2019-16254: HTTP response splitting in WEBrick (Additiona..
-
CVE CVE-2019-15845: A NUL injection vulnerability of File.fnmatch..
-
CVE CVE-2019-16201: Regular Expression Denial of Service vulnerab..
Ruby 2.4.7
Ruby 2.4.6
Ruby 2.4.5
-
CVE CVE-2018-16396: Tainted flags are not propagated in Array#pac..
-
CVE CVE-2018-16395: OpenSSL::X509::Name equality check does not w..
Ruby 2.4.4
-
CVE CVE-2018-6914: Unintentional file and directory creation with..
-
CVE CVE-2018-8779: Unintentional socket creation by poisoned NUL ..
-
CVE CVE-2018-8780: Unintentional directory traversal by poisoned ..
Ruby 2.4.3
Ruby 2.4.2
-
CVE CVE-2017-0898: Buffer underrun vulnerability in Kernel.sprint..
-
CVE CVE-2017-10784: Escape sequence injection vulnerability in th..
-
CVE CVE-2017-14033: Buffer underrun vulnerability in OpenSSL ASN1..
Ruby 2.4.1
Ruby 2.4.0
- Added
Enumerable#sum
- Added
Integer#digits
- Added
Regexp#match?
,Regexp#named_captures
- Updated New constructor
Logger.new(STDOUT, level:, progname:)
- Updated Float:
#round
,#ceil
,#floor
, and#truncate
now accept a precision - Removed Removed
Fixnum
andBignum
classes (unified toInteger
)
Ruby 2.3
Ruby 2.3.8
-
CVE CVE-2018-16396: Tainted flags are not propagated in Array#pac..
-
CVE CVE-2018-16395: OpenSSL::X509::Name equality check does not w..
Ruby 2.3.7
-
CVE CVE-2018-6914: Unintentional file and directory creation with..
-
CVE CVE-2018-8779: Unintentional socket creation by poisoned NUL ..
-
CVE CVE-2018-8780: Unintentional directory traversal by poisoned ..
Ruby 2.3.6
Ruby 2.3.5
-
CVE CVE-2017-0898: Buffer underrun vulnerability in Kernel.sprint..
-
CVE CVE-2017-10784: Escape sequence injection vulnerability in th..
-
CVE CVE-2017-14033: Buffer underrun vulnerability in OpenSSL ASN1..
-
CVE CVE-2017-14064: Heap exposure vulnerability in generating JSO..
Ruby 2.3.4
Ruby 2.3.3
Ruby 2.3.2
Ruby 2.3.1
Ruby 2.3.0
- Added Safe navigation operator
&.
- Added Frozen string literals
- Added
Array#dig
- Added
Hash#fetch_values
,Hash#to_proc
,Hash#dig
- Added 'Did you mean?'
Ruby 2.2
Ruby 2.1
Ruby 2.0
(Last updated on 2024-07-06 19:01:37 +0200)