Ruby/Rails security alerts

Question

How do Ruby developers keep updated on ruby and rubygem security alerts and updates?. I found out about this today:

https://support.cloud.engineyard.com/entries/22915701-january-14-2013-security-vulnerabilities-httparty-extlib-crack-nori-update-these-gems-immediately

and wonder how developers usually keep up with these types of alerts. Thanks in advance.

Answer 1

For Rails, just register for email updates in the Rails security google group :

https://groups.google.com/forum/?fromgroups#!forum/rubyonrails-security

Answer 2

The Ruby Security Announcements list is specifically for security issues in Ruby and Rubygems.