瀏覽代碼

package/ruby: security bump to version 3.3.1

This release includes security fixes:
 - CVE-2024-27282: Arbitrary memory address read vulnerability with
   Regex search
 - CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc
 - CVE-2024-27280: Buffer overread vulnerability in StringIO

https://www.ruby-lang.org/en/news/2024/04/23/ruby-3-3-1-released/

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Fabrice Fontaine 1 年之前
父節點
當前提交
a9207e8ccd
共有 2 個文件被更改,包括 3 次插入3 次删除
  1. 2 2
      package/ruby/ruby.hash
  2. 1 1
      package/ruby/ruby.mk

+ 2 - 2
package/ruby/ruby.hash

@@ -1,5 +1,5 @@
-# https://www.ruby-lang.org/en/news/2023/12/25/ruby-3-3-0-released/
-sha512  7959c5753bfa0bfc4d6d74060869aabbe9815c1c97930659da11b917ee0803ddbbd80e869e00c48b8694b4ba48709c3b6493fd045568e36e902616c35ababf01  ruby-3.3.0.tar.xz
+# https://www.ruby-lang.org/en/news/2024/04/23/ruby-3-3-1-released/
+sha512  c58e9be9b5ab48191fbf7d67e13f0ec42ee71ed338170e0f7b246708e9cfc617ce65098f5ce7ab32d4305e785642d3e44253462104d5b9c4abcb1a4113f48347  ruby-3.3.1.tar.xz
 
 # License files, Locally calculated
 sha256  e849b28d324423e636a3e6bc5d583cdaf4bd046c2b20872c53886b612d01a4a1  LEGAL

+ 1 - 1
package/ruby/ruby.mk

@@ -5,7 +5,7 @@
 ################################################################################
 
 RUBY_VERSION_MAJOR = 3.3
-RUBY_VERSION = $(RUBY_VERSION_MAJOR).0
+RUBY_VERSION = $(RUBY_VERSION_MAJOR).1
 RUBY_VERSION_EXT = 3.3.0
 RUBY_SITE = http://cache.ruby-lang.org/pub/ruby/$(RUBY_VERSION_MAJOR)
 RUBY_SOURCE = ruby-$(RUBY_VERSION).tar.xz