[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[bug#56302] [PATCH v2] gnu: ruby: Update to 2.7.6 [security fixes].
From: |
Remco van 't Veer |
Subject: |
[bug#56302] [PATCH v2] gnu: ruby: Update to 2.7.6 [security fixes]. |
Date: |
Wed, 29 Jun 2022 20:00:37 +0200 |
Includes fixes for: CVE-2022-28739, CVE-2021-41816, and CVE-2021-41817.
* gnu/packages/ruby.scm (ruby-2.7-fixed): New variable.
(ruby-2.7)[replacement]: Graft.
---
gnu/packages/ruby.scm | 16 ++++++++++++++++
1 file changed, 16 insertions(+)
diff --git a/gnu/packages/ruby.scm b/gnu/packages/ruby.scm
index 68e5d8dfd6..0b6626bdf7 100644
--- a/gnu/packages/ruby.scm
+++ b/gnu/packages/ruby.scm
@@ -28,6 +28,7 @@
;;; Copyright © 2021 EuAndreh <eu@euandre.org>
;;; Copyright © 2020 Tomás Ortín Fernández <tomasortin@mailbox.org>
;;; Copyright © 2021 Giovanni Biscuolo <g@xelera.eu>
+;;; Copyright © 2022 Remco van 't Veer <remco@remworks.net>
;;;
;;; This file is part of GNU Guix.
;;;
@@ -152,6 +153,7 @@ (define-public ruby-2.7
(package
(inherit ruby-2.6)
(version "2.7.4")
+ (replacement ruby-2.7-fixed) ; security fixes
(source
(origin
(inherit (package-source ruby-2.6))
@@ -186,6 +188,20 @@ (define-public ruby-2.7
(native-inputs
(list autoconf))))
+(define ruby-2.7-fixed
+ (package
+ (inherit ruby-2.7)
+ (version "2.7.6")
+ (source
+ (origin
+ (inherit (package-source ruby-2.7))
+ (uri (string-append "https://cache.ruby-lang.org/pub/ruby/"
+ (version-major+minor version)
+ "/ruby-" version ".tar.gz"))
+ (sha256
+ (base32
+ "042xrdk7hsv4072bayz3f8ffqh61i8zlhvck10nfshllq063n877"))))))
+
(define-public ruby-3.0
(package
(inherit ruby-2.7)
--
2.36.1
[bug#56302] [PATCH v2] gnu: ruby: Update to 2.7.6 [security fixes].,
Remco van 't Veer <=
[bug#56302] [PATCH] gnu: ruby: Update to 2.7.6 [security fixes]., Maxime Devos, 2022/06/29