futurile/guix-play
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

gnu: ruby-3.1: Upgrade to 3.1.4 [fixes CVE-2023-{28755, 28756}].

Browse Source 
Fixes: CVE-2023-28755 (ReDoS vulnerability in URI), and
CVE-2023-28756 (ReDoS vulnerability in Time).

* gnu/packages/ruby.scm (ruby-3.1): Update to 3.1.4.

Signed-off-by: Andreas Enge <andreas@enge.fr>
This commit is contained in:
Remco van 't Veer 2023-03-31 07:37:08 +02:00 committed by Andreas Enge
parent cd0a8950e4
commit 18e497d41f
No known key found for this signature in database
GPG Key ID: F7D5C9BF765C61E3
1 changed files with 2 additions and 2 deletions

4
gnu/packages/ruby.scm

@ -231,7 +231,7 @@ a focus on simplicity and productivity.")
(define-public ruby-3.1 (define-public ruby-3.1
(package (package
(inherit ruby-3.0) (inherit ruby-3.0)
(version "3.1.3") (version "3.1.4")
(source (source
(origin (origin
(method url-fetch) (method url-fetch)
@ -240,7 +240,7 @@ a focus on simplicity and productivity.")
"/ruby-" version ".tar.xz")) "/ruby-" version ".tar.xz"))
(sha256 (sha256
(base32 (base32
"06ipqz45qcs0y1273gk2gwslxwd7jgighz3mzbddzg16k29n3qaf")))))) "0kzr792rk9n9yrqlyrkc1a0cmbk5y194f7v7p4vwjdk0ww860v8v"))))))
(define-public ruby-3.2 (define-public ruby-3.2
(package (package