Hya folks
I’m introducing Ruby to my workplace and tried installing it on our
server. We’re using RHEL and the most recent Ruby binary package we
have in the repos is 1.8.1 (Yikes indeed).
So the question is: what’s the source tarball we should use to build a
Ruby 1.8.4[1] that is both stable and has all the patches applied?
I found the tarball of the official 1.8.4 release[2], in the “stable”
directory of the ftp.ruby-lang.org. Unfortunately, its dated
24/12/2005 and seems to be the original release, with none of the
patches applied. My admin googled some critical security patches like
[3], realized they were not included in the above tarball, and freaked
out.
So which tarball should we use? We found ruby-1.8-today.tar.gz in the
“snapshots” directory[4], but we’re not sure this is it as we couldn’t
find any instructions or reference to it on the ruby-lang.org site
(the only reference[5] we did find there was to the original,
pre-patched 1.8.4 release).
Thanks!
-Chris
[1] We’re installing 1.8.4 and not 1.8.5 as it’s not confirmed to work
with Rails according to their official download page:
http://www.rubyonrails.com/down
[2] ftp://ftp.ruby-lang.org/pub/ruby/stable/ruby-1.8.4.tar.gz
[3]
http://www.mail-archive.com/[email protected]/msg00403.html