Hello,

Recently, Ruby programming language has had some major security flaws in prior unpatched versions. If you are running one of those versions, we recommend you upgrade Ruby on your server. Only customers who have chosen to have Ruby on the server would be using this component.

Before any upgrade, you would want to check which ruby version you have running on the server. You can obtain that information by entering the following command in root SSH on your server:

ruby -v

You should also check your rails version if you are running Ruby on Rails on your server:

rails -v

If you have Rails versions prior to 2.1, you would use the following instructions to upgrade ruby if it is below ruby 1.8.6-p230:

wget ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.6-p230.tar.gz
tar -xvzf ruby-1.8.6-p230*
cd ruby-1.8.6-p230*
./configure && make && make install
ruby -v

If you are running Rails 2.1 or later, you should use the following instructions instead:

wget ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.7-p72.tar.gz
tar -xvzf ruby-1.8.7-p72*
cd ruby-1.8.7-p72*
./configure && make && make install
ruby -v

Please note that if you are running Rails 2.0.2 and only 2.0.2, neither upgrade versions are compatible. You should upgrade your rails installation instead before upgrading to ruby 1.8.7. Rails is upgraded simply by running:

gem update --system
gem update rails

The first command will update the ruby gems, the second will update Rails itself.

Please note that these upgrades may require coding related changes for ruby applications you might be running. It is the customer's responsibility to correct or troubleshoot coding based changes needed for Ruby or Rails upgrades. If you aren't sure what changes will be required, please see the ruby site or the rails site for development logs.

If you do not wish to upgrade the version yourself, we can upgrade for free any managed hosting dedicated or VPS Linux server customers who request for us to do so. We can upgrade any non-managed hosting dedicated or VPS Linux server customers for a fee of $35 for the upgrade(s). When we perform the upgrade, the customer is still responsible for coding-related changes required by the upgrade for applications to work.

Please let us know if you have any questions or concerns about this issue. Please also ensure to provide your account username, primary domain or server name, and the last 4 digits of your credit card on file for ownership verification if you would like to request that we perform the upgrade(s) for Ruby or Rails on your server.

Thank you,
Lunarpages System Administrator Team