GNU bug report logs - #56301
[PATCH] gnu: ruby: Update to 2.6.10 [security fixes].

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 56301 in the body.
You can then email your comments to 56301 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Remco van 't Veer <remco <at> remworks.net>
To: guix-patches <at> gnu.org
Cc: Remco van 't Veer <remco <at> remworks.net>
Subject: [PATCH] gnu: ruby: Update to 2.6.10 [security fixes].
Date: Wed, 29 Jun 2022 17:54:00 +0200

Includes fixes for: CVE-2022-28739, CVE-2021-41819, CVE-2021-41817,
CVE-2021-31810, CVE-2021-32066, CVE-2021-28965, CVE-2020-25613, and
CVE-2020-10933.

* gnu/packages/ruby.scm (ruby-2.6): Update to 2.6.10.
---
 gnu/packages/ruby.scm | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/ruby.scm b/gnu/packages/ruby.scm
index 68e5d8dfd6..ba26206fd2 100644
--- a/gnu/packages/ruby.scm
+++ b/gnu/packages/ruby.scm
@@ -28,6 +28,7 @@
 ;;; Copyright © 2021 EuAndreh <eu <at> euandre.org>
 ;;; Copyright © 2020 Tomás Ortín Fernández <tomasortin <at> mailbox.org>
 ;;; Copyright © 2021 Giovanni Biscuolo <g <at> xelera.eu>
+;;; Copyright © 2022 Remco van 't Veer <remco <at> remworks.net>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -98,7 +99,7 @@ (define %prawn-project-licenses
 (define-public ruby-2.6
   (package
     (name "ruby")
-    (version "2.6.5")
+    (version "2.6.10")
     (source
      (origin
        (method url-fetch)
@@ -107,7 +108,7 @@ (define-public ruby-2.6
                            "/ruby-" version ".tar.xz"))
        (sha256
         (base32
-         "0qhsw2mr04f3lqinkh557msr35pb5rdaqy4vdxcj91flgxqxmmnm"))
+         "1wn12klc44hn2nh5v1lkqbdyvljip6qhwjqvkkf8zf112gaxxn2z"))
        (modules '((guix build utils)))
        (snippet `(begin
                    ;; Remove bundled libffi

base-commit: c86484782ecdc08c8c75e67cb0067a68a0a9e4d3
-- 
2.36.1

Message #10 received at 56301-done <at> debbugs.gnu.org (full text, mbox):

From: Marius Bakke <marius <at> gnu.org>
To: Remco van 't Veer <remco <at> remworks.net>, 56301-done <at> debbugs.gnu.org
Cc: Remco van 't Veer <remco <at> remworks.net>
Subject: Re: [bug#56301] [PATCH] gnu: ruby: Update to 2.6.10 [security fixes].
Date: Mon, 29 Aug 2022 16:45:39 +0200

[Message part 1 (text/plain, inline)]

Remco van 't Veer <remco <at> remworks.net> skriver:

> Includes fixes for: CVE-2022-28739, CVE-2021-41819, CVE-2021-41817,
> CVE-2021-31810, CVE-2021-32066, CVE-2021-28965, CVE-2020-25613, and
> CVE-2020-10933.
>
> * gnu/packages/ruby.scm (ruby-2.6): Update to 2.6.10.

Applied, thanks!

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.