me/guix
Archived
1
0
Fork 0
Code Activity

gnu: ruby-3.2: Upgrade to 3.2.2 [fixes CVE-2023-{28755, 28756}].

Browse source 
Fixes: CVE-2023-28755 (ReDoS vulnerability in URI), and
CVE-2023-28756 (ReDoS vulnerability in Time).

* gnu/packages/ruby.scm (ruby-3.2): Update to 3.2.2.

Signed-off-by: Andreas Enge <andreas@enge.fr>
This commit is contained in:
Remco van 't Veer 2023-03-31 07:42:43 +02:00 • committed by Andreas Enge
parent 18e497d41f
commit 14c03807ba
No known key found for this signature in database
GPG key ID: F7D5C9BF765C61E3
1 changed files with 2 additions and 2 deletions

4
gnu/packages/ruby.scm
View file

@ -245,7 +245,7 @@ a focus on simplicity and productivity.")
(define-public ruby-3.2
(package
(inherit ruby-3.1)
(version "3.2.1")
(version "3.2.2")
(source
(origin
(method url-fetch)
@ -254,7 +254,7 @@ a focus on simplicity and productivity.")
"/ruby-" version ".tar.xz"))
(sha256
(base32
"0333xln2jkqdfk5zwxas6rpyd4rff2910z99qnyrqi15mrhqcv3l"))))
"08wy2ishjwbccfsrd0iwmyadbwjzrpyxnk74wcrf7163gq7jsdab"))))
(inputs
(modify-inputs (package-inputs ruby-3.1)
(prepend libyaml)))))