[PATCH] gnu: ruby: Update to 3.1.2 [security fixes].

  • Done
  • quality assurance status badge
Details
2 participants
  • Marius Bakke
  • Remco van 't Veer
Owner
unassigned
Submitted by
Remco van 't Veer
Severity
normal
R
R
Remco van 't Veer wrote on 29 Jun 2022 17:56
(address . guix-patches@gnu.org)(name . Remco van 't Veer)(address . remco@remworks.net)
20220629155617.5576-1-remco@remworks.net
Includes fixes for: CVE-2022-28738, and CVE-2022-28739.

* gnu/packages/ruby.scm (ruby-3.1): Update to 3.1.2.
---
gnu/packages/ruby.scm | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)

Toggle diff (32 lines)
diff --git a/gnu/packages/ruby.scm b/gnu/packages/ruby.scm
index 68e5d8dfd6..ef0224b179 100644
--- a/gnu/packages/ruby.scm
+++ b/gnu/packages/ruby.scm
@@ -28,6 +28,7 @@
;;; Copyright © 2021 EuAndreh <eu@euandre.org>
;;; Copyright © 2020 Tomás Ortín Fernández <tomasortin@mailbox.org>
;;; Copyright © 2021 Giovanni Biscuolo <g@xelera.eu>
+;;; Copyright © 2022 Remco van 't Veer <remco@remworks.net>
;;;
;;; This file is part of GNU Guix.
;;;
@@ -203,7 +204,7 @@ (define-public ruby-3.0
(define-public ruby-3.1
(package
(inherit ruby-2.7)
- (version "3.1.1")
+ (version "3.1.2")
(source
(origin
(method url-fetch)
@@ -212,7 +213,7 @@ (define-public ruby-3.1
"/ruby-" version ".tar.xz"))
(sha256
(base32
- "1akcl7vhmwfm6ybj7493kzy58ykh2r39ri9f4xfm2xmhg1msmvvs"))))))
+ "0amzqczgvr51ilcqfgw0n41hrfanzi0wh8k6am3x5dm1z0bx046a"))))))
(define-public ruby-2.5
(package
--
2.36.1
M
M
Marius Bakke wrote on 29 Aug 2022 16:46
(name . Remco van 't Veer)(address . remco@remworks.net)
87o7w3ds53.fsf@gnu.org
Remco van 't Veer <remco@remworks.net> skriver:

Toggle quote (4 lines)
> Includes fixes for: CVE-2022-28738, and CVE-2022-28739.
>
> * gnu/packages/ruby.scm (ruby-3.1): Update to 3.1.2.

Applied, thanks!
-----BEGIN PGP SIGNATURE-----

iIUEARYKAC0WIQRNTknu3zbaMQ2ddzTocYulkRQQdwUCYwzRSQ8cbWFyaXVzQGdu
dS5vcmcACgkQ6HGLpZEUEHdQVAD+O+mX2SRdmNdv4QtdyeFk/8OyzHkERx5R+FE5
2Wfi1pYA/2pJErrk614eToQPErRzhucSPd+BOlZqP3Zrk2N3zocG
=qY8w
-----END PGP SIGNATURE-----

Closed
?