bug#62558: closed ([PATCH] gnu: ruby-3.0: Upgrade to 3.0.6 [fixes CVE-2023-{28755, 28756}].)

[GNU bug Tracking System]

Your message dated Fri, 19 May 2023 11:20:00 +0200
with message-id <ZGc/QLizDaWW68Zs@jurong>
and subject line Close
has caused the debbugs.gnu.org bug report #62558,
regarding [PATCH] gnu: ruby-3.0: Upgrade to 3.0.6 [fixes CVE-2023-{28755, 
28756}].
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs@gnu.org.)


-- 
62558: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=62558
GNU Bug Tracking System
Contact help-debbugs@gnu.org with problems
> --- Begin Message ---
>
>
>
> Subject: 
>
> [PATCH] gnu: ruby-3.0: Upgrade to 3.0.6 [fixes CVE-2023-{28755, 28756}].
>
>
>
>
> Date: 
>
> Fri, 31 Mar 2023 07:30:58 +0200
>
>
>
>
> Fixes: CVE-2023-28755 (ReDoS vulnerability in URI), and
> CVE-2023-28756 (ReDoS vulnerability in Time).
>
> * gnu/packages/ruby.scm (ruby-3.0): Update to 3.0.6.
> ---
>  gnu/packages/ruby.scm | 6 +++---
>  1 file changed, 3 insertions(+), 3 deletions(-)
>
> diff --git a/gnu/packages/ruby.scm b/gnu/packages/ruby.scm
> index 3bf0f0f534..5345fd75da 100644
> --- a/gnu/packages/ruby.scm
> +++ b/gnu/packages/ruby.scm
> @@ -29,7 +29,7 @@
>  ;;; Copyright © 2020 Tomás Ortín Fernández <tomasortin@mailbox.org>
>  ;;; Copyright © 2021 Giovanni Biscuolo <g@xelera.eu>
>  ;;; Copyright © 2022 Philip McGrath <philip@philipmcgrath.com>
> -;;; Copyright © 2022 Remco van 't Veer <remco@remworks.net>
> +;;; Copyright © 2022, 2023 Remco van 't Veer <remco@remworks.net>
>  ;;; Copyright © 2022 Taiju HIGASHI <higashi@taiju.info>
>  ;;; Copyright © 2023 Yovan Naumovski <yovan@gorski.stream>
>  ;;;
> @@ -215,7 +215,7 @@ (define ruby-2.7-fixed
>  (define-public ruby-3.0
>    (package
>      (inherit ruby-2.7)
> -    (version "3.0.5")
> +    (version "3.0.6")
>      (source
>       (origin
>         (method url-fetch)
> @@ -224,7 +224,7 @@ (define-public ruby-3.0
>                             "/ruby-" version ".tar.xz"))
>         (sha256
>          (base32
> -         "1pnxbdkkh2miq9nqfq2qscvh76nprzg0r620d9ckdzih42xbaz6g"))))
> +         "1lfvgm6jbspmwmc3haww83l1l8vl1airzi08ljrcz19dws9yxjxm"))))
>      (inputs
>       (modify-inputs (package-inputs ruby-2.7)
>         (replace "openssl" openssl)))))
> -- 
> 2.39.2
>
>
>
>
> --- End Message ---
> --- Begin Message ---
>
>
>
> Subject: 
>
> Close
>
>
>
>
> Date: 
>
> Fri, 19 May 2023 11:20:00 +0200
>
>
>
>
> Applied, thanks!
>
> Andreas
>
>
>
> --- End Message ---