# Ruby 1.8.6 p230 - really a fix?

**URL:** <https://www.ruby-forum.com/t/ruby-1-8-6-p230-really-a-fix/141387>\
**Category:** Ruby\
**Created:** [June 25, 2008, 10:44am UTC](https://www.ruby-forum.com/t/ruby-1-8-6-p230-really-a-fix/141387 "2008-06-25T10:44:52Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Michal\_S](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/779978/32.png) [@Michal\_S](https://www.ruby-forum.com/u/Michal_S)\
**Post date:** [June 25, 2008, 10:44am UTC](https://www.ruby-forum.com/t/ruby-1-8-6-p230-really-a-fix/141387/1 "2008-06-25T10:44:52Z")

</div>

Hello

reading  
[http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html](http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html)  
I find the current state somewhat unsettling. I have not hit the  
problem myself so I can only rely on the comments there. These seem to  
indicate that the p230 does not really resolve the issue, only changes  
a hang into a crash or something like that.

I would appreciate if somebody could shed some light on this issue.

Thanks

Michal

---

<div class="post-metadata">

**Author:** ![Michal\_S](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/779978/32.png) [@Michal\_S](https://www.ruby-forum.com/u/Michal_S)\
**Post date:** [June 25, 2008, 10:49am UTC](https://www.ruby-forum.com/t/ruby-1-8-6-p230-really-a-fix/141387/2 "2008-06-25T10:49:34Z")

</div>

unsubscribe

---

<div class="post-metadata">

**Author:** ![Michal\_S](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/779978/32.png) [@Michal\_S](https://www.ruby-forum.com/u/Michal_S)\
**Post date:** [June 25, 2008, 10:52am UTC](https://www.ruby-forum.com/t/ruby-1-8-6-p230-really-a-fix/141387/3 "2008-06-25T10:52:31Z")

</div>

unsubscribe

---

<div class="post-metadata">

**Author:** ![Michal\_S](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/779978/32.png) [@Michal\_S](https://www.ruby-forum.com/u/Michal_S)\
**Post date:** [June 25, 2008, 9:25pm UTC](https://www.ruby-forum.com/t/ruby-1-8-6-p230-really-a-fix/141387/4 "2008-06-25T21:25:58Z")

</div>

It kind of looks like alot of rails things are broken via this ruby  
update, There are reports out there from varying people claiming that  
older or newer versions of ruby/rails combination will work. I’m kind  
of waiting for Rails Core to post something or a fix soon until then  
if you are feeling frisky read the zed shaw analysis on the exploit  
found here…  
[http://www.zedshaw.com/rants/the\_big\_ruby\_vulnerabilities.html](http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html)  
and start trying to work through the seg faults.

---

<div class="post-metadata">

**Author:** ![Michal\_S](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/779978/32.png) [@Michal\_S](https://www.ruby-forum.com/u/Michal_S)\
**Post date:** [June 25, 2008, 6:28pm UTC](https://www.ruby-forum.com/t/ruby-1-8-6-p230-really-a-fix/141387/5 "2008-06-25T18:28:44Z")

</div>

On Wed, Jun 25, 2008 at 3:42 AM, Michal S. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)  
wrote:

> reading [June 2008 Ruby Security Advisory: A Summary](http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html)  
> I find the current state somewhat unsettling. I have not hit the  
> problem myself so I can only rely on the comments there. These seem to  
> indicate that the p230 does not really resolve the issue, only changes  
> a hang into a crash or something like that.
> 
> I would appreciate if somebody could shed some light on this issue.

Geez. I’ve spent my last two evenings trying to figure out why I  
can’t upgrade, only to find it may be pointless to upgrade?

[http://groups.google.com/group/rubyonrails-talk/browse\_thread/thread/37411a24c95aab11?hl=en](http://groups.google.com/group/rubyonrails-talk/browse_thread/thread/37411a24c95aab11?hl=en)

[http://groups.google.com/group/rubyonrails-talk/browse\_thread/thread/9b9cbc2122981ac1?hl=en](http://groups.google.com/group/rubyonrails-talk/browse_thread/thread/9b9cbc2122981ac1?hl=en)