---
title: "This week's Ruby news, issue 219"
publication: "Ruby Weekly"
issue: 219
published_at: "2014-10-30"
canonical_url: "https://rubyweekly.com/issues/219"
---

This week's Ruby news, issue 219

This week's Ruby and Rails news[Read this e-mail on the Web](http://rubyweekly.com/issues/219)

Ruby WeeklyIssue 219 — October 30, 2014

ruby-lang[Ruby 2.1.4, 2.0.0-p594, and 1.9.3-p550 Released](https://www.ruby-lang.org/en/news/2014/10/27/ruby-2-1-4-released/)The latest production release of MRI includes a security fix for CVE-2014-8080 and tightened default settings on ext/openssl (both mentioned below). [2.0.0-p594](https://www.ruby-lang.org/en/news/2014/10/27/ruby-2-0-0-p594-is-released/) and [1.9.3-p550](https://www.ruby-lang.org/en/news/2014/10/27/ruby-1-9-3-p550-is-released/) also include the same tweaks.


Paul Sobocinski[Rails vs. Sinatra by Example](http://www.airpair.com/ruby-on-rails/posts/rails-vs-sinatra)An attempt at comparing the relative merits of Rails and Sinatra by building the same webapp with both.


ruby-lang.org[CVE-2014-8080: Denial of Service XML Expansion](https://www.ruby-lang.org/en/news/2014/10/27/rexml-dos-cve-2014-8080/)Unrestricted entity expansion can lead to a DoS vulnerability in REXML (an XML processor in the Ruby standard library). It has been fixed in 2.1.4, 2.0.0-p594, and 1.9.3-p550, all released this week.


SemaphoreSponsored[Semaphore launched CI for Bitbucket projects](https://semaphoreapp.com/)Semaphore has everything you need to automatically test any Ruby project from a Git repository on GitHub and now also Bitbucket. The service is free for open source projects and up to 100 private builds per month.

[![Semaphore\](http://s3.amazonaws.com/nlga/uploads/item/image/16950/i.png)](https://semaphoreapp.com/?utm_source=rubyweekly&utm_medium=email)


SitePoint[Tagging from Scratch in Rails](http://www.sitepoint.com/tagging-scratch-rails/)Nouran Mahmoud demonstrates, from bare essentials, how to create your own simple tagging system.


Leonard Garvey[Feature Flags on Rails](https://www.reinteractive.net/posts/221-feature-flags-on-rails)A look at using Rollout to implement feature flags on your app, a way to roll out new features to only a subset of users.


ruby-lang.org[Changed Default Settings of ext/openssl](https://www.ruby-lang.org/en/news/2014/10/27/changing-default-settings-of-ext-openssl/)Insecure SSL/TLS options are now disabled by default on 2.1.4+, 2.0.0-p594, and 1.9.3-p550. This may cause problems in some cases so be alert.


In brief

Curated by [Peter Cooper](https://twitter.com/peterc) and [Glenn Goodrich](https://twitter.com/ruprict), and published by [Cooperpress](https://cooperpress.com/).
Send feedback by simply replying to this mail.
Want to sponsor an issue? See our [media kit.](https://cooperpress.com/mediakit)
Want to post a job? Email us or [use our self-serve system.](https://booking.cooperpress.com/jobs)

[Unsubscribe](*|UNSUB|*) | [Change email address](*|UPDATE_PROFILE|*) | [Read this issue on the Web](http://rubyweekly.com/issues/219)

© Cooperpress Ltd. Office 30, Lincoln Way, Louth, LN11 0LS, UK
[Email policy](https://cooperpress.com/spam.html) [Privacy policy](https://cooperpress.com/privacy.html)