TruffleRuby - GraalVM Community Edition 1.0 RC9

Security:

• CVE-2018-16396, tainted flags are not propagated in Array#pack and String#unpack with some directives has been mitigated by adding additional taint operations.

New features:

• LLVM for Oracle Linux 7 can now be installed without building from source.

Bug fixes

• Times can now be created with UTC offsets in +/-HH:MM:SS format.
• Proc#to_s now has ASCII-8BIT as its encoding instead of the incorrect UTF-8.
• String#% now has the correct encoding for UTF-8 and US-ASCII format strings, instead of the incorrect ASCII-8BIT.
• Updated BigDecimal#to_s to use e instead of E for exponent notation.
• Fixed BigDecimal#to_s to allow f as a format flag to indicate conventional floating point notation. Previously only F was allowed.

Changes:

• The supported version of LLVM for Oracle Linux has been updated from 3.8 to 4.0.
• mysql2 is now patched to avoid a bug in passing NULL to rb_scan_args, and now passes the majority of its test suite.
• The post-install script now automatically detects if recompiling the OpenSSL C extension is needed. The post-install script should always be run in TravisCI as well, see doc/user/standalone-distribution.md.
• Detect when the system libssl is incompatible more accurately and add instructions on how to recompile the extension.