Juergen Daubert
c951764e5e
includes a security fix, see https://www.ruby-lang.org/en/news/2013/11/22/heap-overflow-in-floating-point-parsing-cve-2013-4164/