Ruby’s Vulnerability Handling Debacle

What disappoints me the most is that the RoR maintainers made almost exactly the same mistake a couple of years ago, trying to keep a security flaw under wraps rather than being forthright about it.