From 4684d6dcd0b9a35ea7ee6d780531ef9fc21f499e Mon Sep 17 00:00:00 2001 From: Remco van 't Veer Date: Thu, 27 Mar 2025 13:38:12 +0100 Subject: gnu: ruby-3.2: Update to 3.2.8. Fixes: CVE-2024-27281 RCE vulnerability with .rdoc_options in RDoc CVE-2024-27282 Arbitrary memory address read vulnerability with Regex search CVE-2024-39908 DoS in REXML CVE-2025-27219 Denial of Service in CGI::Cookie.parse CVE-2025-27220 ReDoS in CGI::Util#escapeElement CVE-2025-27221 userinfo leakage in URI#join, URI#merge and URI#+ * gnu/packages/ruby.scm (ruby-3.2): Update to 3.2.8. Change-Id: I4938434cd15650796fe020650a452a876daa5aeb Signed-off-by: Andreas Enge --- gnu/packages/ruby.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'gnu/packages/ruby.scm') diff --git a/gnu/packages/ruby.scm b/gnu/packages/ruby.scm index 74884e19fd8..07e6b3e1fc4 100644 --- a/gnu/packages/ruby.scm +++ b/gnu/packages/ruby.scm @@ -280,7 +280,7 @@ a focus on simplicity and productivity.") (define-public ruby-3.2 (package (inherit ruby-3.1) - (version "3.2.3") + (version "3.2.8") (source (origin (method url-fetch) @@ -289,7 +289,7 @@ a focus on simplicity and productivity.") "/ruby-" version ".tar.xz")) (sha256 (base32 - "0ss7pb7f62sakq5ywpw3dl0v586cl61cd91qlm1i094c9fak3cng")))) + "0g3s68kcxb24y4h24wvikvk5v3q6l6hs0kjxms9m49sm048d7k0w")))) (inputs (modify-inputs (package-inputs ruby-3.1) (prepend libyaml))))) -- cgit v1.3