Ruby all versions changelog
Ruby 3.3
Ruby 3.3.6
Ruby 3.3.5
Ruby 3.3.4
Ruby 3.3.3
Ruby 3.3.2
Ruby 3.3.1
-
CVE CVE-2024-27282: Arbitrary memory address read vulnerability w..
-
CVE CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc..
Ruby 3.3.0
- Internals Introduced Prism parser as a default gem
- Internals Lrama replaces Bison as parser generator
- Internals Major YJIT performance improvements, introduction of RJIT
- Internals Introduction of M:N thread scheduler
- Internals Several performance improvements in the Garbage Collector
- Internals Enhancements in IRB: advanced irb:rdbg integration; pager support
Ruby 3.2
Ruby 3.2.6
Ruby 3.2.5
Ruby 3.2.4
-
CVE CVE-2024-27282: Arbitrary memory address read vulnerability w..
-
CVE CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc..
Ruby 3.2.3
Ruby 3.2.2
Ruby 3.2.1
Ruby 3.2.0
- Internals WASI based WebAssembly support
- Internals Production-ready YJIT
- Internals Regexp improvements against ReDoS
- Internals IRB improvements (SyntaxSuggest, ErrorHighlight)
- Internals Bundler 2.4 now uses PubGrub resolver instead of Molinillo
Ruby 3.1
Ruby 3.1.6
Ruby 3.1.5
-
CVE CVE-2024-27282: Arbitrary memory address read vulnerability w..
-
CVE CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc..
-
CVE CVE-2024-27280: Buffer overread vulnerability in StringIO..
Ruby 3.1.4
Ruby 3.1.3
Ruby 3.1.2
Ruby 3.1.1
Ruby 3.1.0
- Added debug gem: A new debugger
- Added error_highlight: Fine-grained error location in backtrace
- Added IRB Autocomplete and Documentation Display
- Updated Values in Hash literals and keyword arguments can be omitted.
- Updated Updates in RBS / TypeProf
- Internals YJIT: New experimental in-process JIT compiler (experimental)
Ruby 3.0
Ruby 3.0.7
-
CVE CVE-2024-27282: Arbitrary memory address read vulnerability w..
-
CVE CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc..
-
CVE CVE-2024-27280: Buffer overread vulnerability in StringIO..
Ruby 3.0.6
Ruby 3.0.5
Ruby 3.0.4
Ruby 3.0.3
-
CVE CVE-2021-41817: Regular Expression Denial of Service Vulnerab..
-
CVE CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse..
Ruby 3.0.2
-
CVE CVE-2021-31810: Trusting FTP PASV responses vulnerability in ..
-
CVE CVE-2021-32066: A StartTLS stripping vulnerability in Net::IM..
-
CVE CVE-2021-31799: A command injection vulnerability in RDoc..
Ruby 3.0.1
Ruby 3.0.0
- Added Ractor - Actor-model like concurrent abstraction (experimental)
- Added Fiber Scheduler for light-weight concurrency (experimental)
- Added RBS - a language to describe the structure of Ruby classes
- Added TypeProf - type analysis tool, generates RBS type signatures (experimental)
- Added
Hash#except - Updated Keyword arguments are separated from other arguments
- Updated Rightward assignment statement
- Updated Reversed (again) order of backtrace (experimental)
- Updated Endless method definition
def square(x) = x * x - Internals MJIT improvements
Ruby 2.7
Ruby 2.7.8
Ruby 2.7.7
Ruby 2.7.6
Ruby 2.7.5
-
CVE CVE-2021-41817: Regular Expression Denial of Service Vulnerab..
-
CVE CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse..
Ruby 2.7.4
-
CVE CVE-2021-31810: Trusting FTP PASV responses vulnerability in ..
-
CVE CVE-2021-32066: A StartTLS stripping vulnerability in Net::IM..
-
CVE CVE-2021-31799: A command injection vulnerability in RDoc..
Ruby 2.7.3
Ruby 2.7.2
Ruby 2.7.1
-
CVE CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON ..
-
CVE CVE-2020-10933: Heap exposure vulnerability in the socket lib..
Ruby 2.7.0
- Added Pattern Matching (experimental)
- Updated REPL improvements
- Updated Separation of positional and keyword arguments
- Updated Argument forwarding
- Internals Compaction GC
Ruby 2.6
Ruby 2.6.10
Ruby 2.6.9
-
CVE CVE-2021-41817: Regular Expression Denial of Service Vulnerab..
-
CVE CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse..
Ruby 2.6.8
-
CVE CVE-2021-31810: Trusting FTP PASV responses vulnerability in ..
-
CVE CVE-2021-32066: A StartTLS stripping vulnerability in Net::IM..
-
CVE CVE-2021-31799: A command injection vulnerability in RDoc..
Ruby 2.6.7
Ruby 2.6.6
-
CVE CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON ..
-
CVE CVE-2020-10933: Heap exposure vulnerability in the socket lib..
Ruby 2.6.5
-
CVE CVE-2019-16255: A code injection vulnerability of Shell#[] an..
-
CVE CVE-2019-16254: HTTP response splitting in WEBrick (Additiona..
-
CVE CVE-2019-15845: A NUL injection vulnerability of File.fnmatch..
-
CVE CVE-2019-16201: Regular Expression Denial of Service vulnerab..
Ruby 2.6.4
Ruby 2.6.3
Ruby 2.6.2
Ruby 2.6.1
Ruby 2.6.0
- Added endless ranges
(1..) - Added
Enumerable#chain - Added function composition operators
<<, >>toProc - Updated
#thenalias for#yield_self - Internals JIT compiler
--jit - Internals Bundler is installed as a default gem
Ruby 2.5
Ruby 2.5.9
Ruby 2.5.8
-
CVE CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON ..
-
CVE CVE-2020-10933: Heap exposure vulnerability in the socket lib..
Ruby 2.5.7
-
CVE CVE-2019-16255: A code injection vulnerability of Shell#[] an..
-
CVE CVE-2019-16254: HTTP response splitting in WEBrick (Additiona..
-
CVE CVE-2019-15845: A NUL injection vulnerability of File.fnmatch..
-
CVE CVE-2019-16201: Regular Expression Denial of Service vulnerab..
Ruby 2.5.6
Ruby 2.5.5
Ruby 2.5.4
Ruby 2.5.3
Ruby 2.5.2
-
CVE CVE-2018-16396: Tainted flags are not propagated in Array#pac..
-
CVE CVE-2018-16395: OpenSSL::X509::Name equality check does not w..
Ruby 2.5.1
-
CVE CVE-2018-6914: Unintentional file and directory creation with..
-
CVE CVE-2018-8779: Unintentional socket creation by poisoned NUL ..
-
CVE CVE-2018-8780: Unintentional directory traversal by poisoned ..
Ruby 2.5.0
- Added
yield_self - Added
rescuein blocks - Added
Hash#sliceandHash#transform_keys - Added
ERB#result_with_hash - Updated New
Arrayaliases -#prepend (#unshift)and#append (#push) - Updated Pattern argument on
Enumerablemethods - Updated Keyword arguments on
Struct.new - Updated Removed Top-level constant lookup
- Updated Reverse order of backtrace (oldest call first) (experimental)
Ruby 2.4
Ruby 2.4.10
Ruby 2.4.9
Ruby 2.4.8
-
CVE CVE-2019-16255: A code injection vulnerability of Shell#[] an..
-
CVE CVE-2019-16254: HTTP response splitting in WEBrick (Additiona..
-
CVE CVE-2019-15845: A NUL injection vulnerability of File.fnmatch..
-
CVE CVE-2019-16201: Regular Expression Denial of Service vulnerab..
Ruby 2.4.7
Ruby 2.4.6
Ruby 2.4.5
-
CVE CVE-2018-16396: Tainted flags are not propagated in Array#pac..
-
CVE CVE-2018-16395: OpenSSL::X509::Name equality check does not w..
Ruby 2.4.4
-
CVE CVE-2018-6914: Unintentional file and directory creation with..
-
CVE CVE-2018-8779: Unintentional socket creation by poisoned NUL ..
-
CVE CVE-2018-8780: Unintentional directory traversal by poisoned ..
Ruby 2.4.3
Ruby 2.4.2
-
CVE CVE-2017-0898: Buffer underrun vulnerability in Kernel.sprint..
-
CVE CVE-2017-10784: Escape sequence injection vulnerability in th..
-
CVE CVE-2017-14033: Buffer underrun vulnerability in OpenSSL ASN1..
Ruby 2.4.1
Ruby 2.4.0
- Added
Enumerable#sum - Added
Integer#digits - Added
Regexp#match?,Regexp#named_captures - Updated New constructor
Logger.new(STDOUT, level:, progname:) - Updated Float:
#round,#ceil,#floor, and#truncatenow accept a precision - Removed Removed
FixnumandBignumclasses (unified toInteger)
Ruby 2.3
Ruby 2.3.8
-
CVE CVE-2018-16396: Tainted flags are not propagated in Array#pac..
-
CVE CVE-2018-16395: OpenSSL::X509::Name equality check does not w..
Ruby 2.3.7
-
CVE CVE-2018-6914: Unintentional file and directory creation with..
-
CVE CVE-2018-8779: Unintentional socket creation by poisoned NUL ..
-
CVE CVE-2018-8780: Unintentional directory traversal by poisoned ..
Ruby 2.3.6
Ruby 2.3.5
-
CVE CVE-2017-0898: Buffer underrun vulnerability in Kernel.sprint..
-
CVE CVE-2017-10784: Escape sequence injection vulnerability in th..
-
CVE CVE-2017-14033: Buffer underrun vulnerability in OpenSSL ASN1..
-
CVE CVE-2017-14064: Heap exposure vulnerability in generating JSO..
Ruby 2.3.4
Ruby 2.3.3
Ruby 2.3.2
Ruby 2.3.1
Ruby 2.3.0
- Added Safe navigation operator
&. - Added Frozen string literals
- Added
Array#dig - Added
Hash#fetch_values,Hash#to_proc,Hash#dig - Added 'Did you mean?'
Ruby 2.2
Ruby 2.1
Ruby 2.0
(Last updated on 2025-05-27 22:26:47 +0200)