Ruby 3.0.2 has been released.

This release includes security fixes. Please check the topics below for details.

• CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP - https://www.ruby-lang.org/en/news/2021/07/07/trusting-pasv-responses-in-net-ftp/

• CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP - https://www.ruby-lang.org/en/news/2021/07/07/starttls-stripping-in-net-imap/

• CVE-2021-31799: A command injection vulnerability in RDoc - https://www.ruby-lang.org/en/news/2021/05/02/os-command-injection-in-rdoc/

bundler-leak

The best tool to find leaky gems in your dependencies. Make sure memory leaks are not in your gem dependencies.

faraday

Faraday is an HTTP client library that provides a common interface over many adapters (such as Net::HTTP) and embraces the concept of Rack middleware when processing the request/response cycle.

working_hours

A modern ruby gem allowing to do time calculation with working hours.

ruby-git

The Git Gem provides an API that can be used to create, read, and manipulate Git repositories by wrapping system calls to the git binary. The API can be used for working with Git in complex interactions including branching and merging, object inspection and manipulation, history, patch generation and more.

Exception: Zlib::DataError: unknown compression method

Recently encountered a problem when we used rest-client, faraday gem or other HTTP client libraries to post data to WeChat Pay Unifiedorder API - https://pay.weixin.qq.com/wiki/doc/api/jsapi.php?chapter=9_1.

RVM( or Rbenv), RubyGems and Bundler

RVM( or Rbenv), RubyGems, and Bundler work together to give us a lot of control over our code’s environment. If you know how they work, you’ll be better prepared to troubleshoot any problems you encounter.

Docker Desktop, Docker Compose and Kubernetes (K8S) on macOS

Docker Desktop is an easy-to-install application for your Mac or Windows environment that enables you to build and share containerized applications and microservices. Docker Desktop includes Docker Engine, Docker CLI client, Docker Compose, Docker Content Trust, Kubernetes, and Credential Helper.

update-kube-cert

update-kube-cert is used to extended kubernetes cluster certificates that have expired or are about to expire.

This script is suitable for all k8s version cluster certificate update (using kubeadm initialized cluster).

Ingress Nginx with ModSecurity

ModSecurity, sometimes called Modsec, is an open-source web application firewall (WAF). Originally designed as a module for the Apache HTTP Server, it has evolved to provide an array of Hypertext Transfer Protocol request and response filtering capabilities along with other security features across a number of different platforms including Apache HTTP Server,[1][2] Microsoft IIS and Nginx.[3] It is a free software released under the Apache license 2.0.