130 - January 31, 2013

Not many new libraries or code but a ton of great articles in this week's Ruby Weekly (issue 130!): - enjoy.

RubyGems.org Compromised I wouldn't normally link to a Hacker News discussion but it's a great source of information. Basically, a gem was pushed to RubyGems.org that took advantage of a YAML-parsing vulnerability to break into some of the site's configuration files, prompting a widespread security alert. (Things have now died down a bit, thankfully.) Rails 3.0.20, and 2.3.16 Released Due to JSON Vulnerabilities Fresh security fixes are out for the Rails 3.0.x and 2.3.x branches. If you're on Rails 3.1.x and 3.2.x, you can breathe easy (for now). How to Apply a Rails Security Patch There may be reasons you can't upgrade your entire set of Rails gems so you'll instead want to apply a patch. Brian Buchalter shows how it's done. Security Announcement: Devise v2.2.3, v2.1.3, v2.0.5 and v1.5.3 Released From our Sponsor Monitor Your Apps' Performance Anytime, Anywhere with New R...

Full article: http://rubyweekly.com/archive/130.html