2 ms·
My announcement emails contain the hashes and I sign the emails. If you don't trust the blog, you can verify my signature against the announcement emails: htt
by tenderlove 14y ago
My announcement emails contain the hashes and I sign the emails. If you don't trust the blog, you can verify my signature against the announcement emails:
http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-talk/405934 http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-talk/...
- marshray 14y agoSome of these patches involve dates that are quite old. For example, https://rubyonrails-security.googlegroups.com/attach/6c2482d4ed1545e6/3-0-jdom.patch?view=1&part=3 https://rubyonrails-security.googlegroups.com/attach/6c2482d... bears a timestamp of Fri, 8 Feb 2013 02:48:22 +0000. Is this indicative of the time the vulnerability was reported? Is it normal procedure for a patch for a security vulnerability to delayed for 36 days?