One more question. What is the process with H1 disclosure? Because to me it seems that the H1 report is still private despite being referenced in the GHSAvo.x (Vit Ondruch)
The CVE-2026-27820 was fixed and disclosed more than one month ago: https://www.ruby-lang.org/en/news/2026/03/05/buffer-overflow-zlib-cve-2026-27820/ However, there is still no public information on https://www.cve.org/CVERecord?id...vo.x (Vit Ondruch)
My email client does not like this proposal: <img style="width: 232px;" src="clipboard-202603312047-a8wkw.png"><br> Maybe `:))` (even bigger smile) should be considered instead?vo.x (Vit Ondruch)
byroot (Jean Boussier) wrote in #note-6: > I'm not 100% sure I understand what you mean. When the backticks were changed, I have seen more broken test suites then the actual code. And the test suites typically checks error text outpu...vo.x (Vit Ondruch)
> This however has some small backward compatibly consequences, as code parsing backtraces with regexps isn't that rare. > ... This is typically not the case for test suites, unfortunatelyvo.x (Vit Ondruch)
And RSpec were also adjusted to the new behavior AFAICT: https://github.com/rspec/rspec/pull/282/commits/1c20fa80772ca7a1ed0512056ce7cd6a94f8e68dvo.x (Vit Ondruch)
Just FTR, not sure how the revert is supposed to look like, but at least Pry was adjusted for the new behavior: https://github.com/pry/pry/pull/2357 It does not benefit from columns, but I suspect the revert would somehow influence...vo.x (Vit Ondruch)
matz (Yukihiro Matsumoto) wrote in #note-8: > I think“Ruby's License” is something described in COPYING, i.e., it is inseparable from BSD-2clause. Historically it was combination with GPL, so some description should be updated. > ... T...vo.x (Vit Ondruch)
vo.x (Vit Ondruch) wrote in #note-10: > And I have not tried what would happen if the array returned by `instance_variables_to_inspect` contained some garbage ... Just tested a few examples: ~~~ $ irb irb(main):001* class Foo i...vo.x (Vit Ondruch)
vo.x (Vit Ondruch)07:22 AM Ruby Misc #22005: Missing information about CVE on cve.org