me
/
guix
Archived
1
0
Fork 0
Code

gnu: ruby-3.2: Upgrade to 3.2.2 [fixes CVE-2023-{28755, 28756}]. 

Fixes: CVE-2023-28755 (ReDoS vulnerability in URI), and
CVE-2023-28756 (ReDoS vulnerability in Time).

* gnu/packages/ruby.scm (ruby-3.2): Update to 3.2.2.

Signed-off-by: Andreas Enge <andreas@enge.fr>
master
Remco van 't Veer 2023-03-31 07:42:43 +02:00 committed by Andreas Enge
parent 18e497d41f
commit 14c03807ba
No known key found for this signature in database
GPG Key ID: F7D5C9BF765C61E3
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
gnu/packages/ruby.scm
View File

@ -245,7 +245,7 @@ a focus on simplicity and productivity.")
(define-public ruby-3.2
(package
(inherit ruby-3.1)
(version "3.2.1")
(version "3.2.2")
(source
(origin
(method url-fetch)
@ -254,7 +254,7 @@ a focus on simplicity and productivity.")
"/ruby-" version ".tar.xz"))
(sha256
(base32
"0333xln2jkqdfk5zwxas6rpyd4rff2910z99qnyrqi15mrhqcv3l"))))
"08wy2ishjwbccfsrd0iwmyadbwjzrpyxnk74wcrf7163gq7jsdab"))))
(inputs
(modify-inputs (package-inputs ruby-3.1)
(prepend libyaml)))))