Ruby Issue Tracking System

08/19/2024

09:21 AM Ruby Misc #20685 (Closed): Ruby 3.2.4 tag mentions unrelated changes (CVE-2024-27280)

# Problem
According to https://github.com/ruby/ruby/releases/tag/v3_2_4,
it mentions "CVE-2024-27280: Buffer overread vulnerability in StringIO"
as a security fix, but https://www.ruby-lang.org/en/news/2024/03/21/buffer-overread-cve... kenhys (Kentaro Hayashi)

04/19/2021

09:40 AM Ruby Bug #17813 (Closed): rb_funcall() may reset the latest socket error unexpectedlly since Ruby 3.0.0

### The problem
It seems that when rb_funcall() is called, the socket error is reset.
This behavior is introduced since Ruby 3.0.0 on Windows.
With this incompatible change, it fails to get WSAGetLastError correctly
even though t... kenhys (Kentaro Hayashi)

02/25/2019

08:51 AM Ruby Bug #15621 (Closed): system({}, ...) breaks nonascii ENV["PATH"] on Windows

### Problem
It seems that `system({}, ...)` breaks nonascii `ENV["PATH"]` after execution.
`system(...)` isn't affected. Only `system(env, ...)` is affected.
OS: Windows 7
Ruby: https://github.com/oneclick/rubyinstaller2/releas... kenhys (Kentaro Hayashi)