GNU bug report logs - #56303
[PATCH] gnu: ruby: Update to 3.0.4 [security fixes].

Previous Next

Package: guix-patches;

Reported by: Remco van 't Veer <remco <at> remworks.net>

Date: Wed, 29 Jun 2022 15:57:02 UTC

Severity: normal

Tags: patch

Done: Marius Bakke <marius <at> gnu.org>

Bug is archived. No further changes may be made.

Full log


View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: Marius Bakke <marius <at> gnu.org>
Cc: tracker <at> debbugs.gnu.org
Subject: bug#56303: closed ([PATCH] gnu: ruby: Update to 3.0.4 [security
 fixes].)
Date: Mon, 29 Aug 2022 14:50:02 +0000
[Message part 1 (text/plain, inline)]
Your message dated Mon, 29 Aug 2022 16:49:34 +0200
with message-id <87ilmbds01.fsf <at> gnu.org>
and subject line Re: [bug#56303] [PATCH] gnu: ruby: Update to 3.0.4 [security fixes].
has caused the debbugs.gnu.org bug report #56303,
regarding [PATCH] gnu: ruby: Update to 3.0.4 [security fixes].
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs <at> gnu.org.)


-- 
56303: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=56303
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems
[Message part 2 (message/rfc822, inline)]
From: Remco van 't Veer <remco <at> remworks.net>
To: guix-patches <at> gnu.org
Cc: Remco van 't Veer <remco <at> remworks.net>
Subject: [PATCH] gnu: ruby: Update to 3.0.4 [security fixes].
Date: Wed, 29 Jun 2022 17:55:55 +0200
Includes fixes for: CVE-2022-28738, CVE-2022-28739, CVE-2021-41819,
CVE-2021-41816, and CVE-2021-41817.

* gnu/packages/ruby.scm (ruby-3.0): Update to 3.0.4.
---
 gnu/packages/ruby.scm | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/ruby.scm b/gnu/packages/ruby.scm
index 68e5d8dfd6..41774b4907 100644
--- a/gnu/packages/ruby.scm
+++ b/gnu/packages/ruby.scm
@@ -28,6 +28,7 @@
 ;;; Copyright © 2021 EuAndreh <eu <at> euandre.org>
 ;;; Copyright © 2020 Tomás Ortín Fernández <tomasortin <at> mailbox.org>
 ;;; Copyright © 2021 Giovanni Biscuolo <g <at> xelera.eu>
+;;; Copyright © 2022 Remco van 't Veer <remco <at> remworks.net>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -189,7 +190,7 @@ (define-public ruby-2.7
 (define-public ruby-3.0
   (package
     (inherit ruby-2.7)
-    (version "3.0.2")
+    (version "3.0.4")
     (source
      (origin
        (method url-fetch)
@@ -198,7 +199,7 @@ (define-public ruby-3.0
                            "/ruby-" version ".tar.xz"))
        (sha256
         (base32
-         "0h2w2ms4gx2s96v3lzdr3add94bd2qqkhdjzaycmaqhg21rpf3jp"))))))
+         "1w7jpq3flnm007z5kj8kixgm8l4smb80w8ak4993a12j0irzq8lf"))))))
 
 (define-public ruby-3.1
   (package
-- 
2.36.1



[Message part 3 (message/rfc822, inline)]
From: Marius Bakke <marius <at> gnu.org>
To: Remco van 't Veer <remco <at> remworks.net>, 56303-done <at> debbugs.gnu.org
Cc: Remco van 't Veer <remco <at> remworks.net>
Subject: Re: [bug#56303] [PATCH] gnu: ruby: Update to 3.0.4 [security fixes].
Date: Mon, 29 Aug 2022 16:49:34 +0200
[Message part 4 (text/plain, inline)]
Remco van 't Veer <remco <at> remworks.net> skriver:

> Includes fixes for: CVE-2022-28738, CVE-2022-28739, CVE-2021-41819,
> CVE-2021-41816, and CVE-2021-41817.
>
> * gnu/packages/ruby.scm (ruby-3.0): Update to 3.0.4.

Applied, thanks!
[signature.asc (application/pgp-signature, inline)]

This bug report was last modified 2 years and 265 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.