From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id AFmUEnR2vGJLSgEAbAwnHQ (envelope-from ) for ; Wed, 29 Jun 2022 17:57:40 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id sI+UEnR2vGIuBQAA9RJhRA (envelope-from ) for ; Wed, 29 Jun 2022 17:57:40 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id DED0F73B3 for ; Wed, 29 Jun 2022 17:57:39 +0200 (CEST) Received: from localhost ([::1]:53428 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1o6a4Q-0000Qe-SN for larch@yhetil.org; Wed, 29 Jun 2022 11:57:38 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:37962) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1o6a3q-0008Ul-Ek for guix-patches@gnu.org; Wed, 29 Jun 2022 11:57:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:37825) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1o6a3q-0004on-6b for guix-patches@gnu.org; Wed, 29 Jun 2022 11:57:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1o6a3q-0007L9-6N for guix-patches@gnu.org; Wed, 29 Jun 2022 11:57:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#56303] [PATCH] gnu: ruby: Update to 3.0.4 [security fixes]. Resent-From: Remco van 't Veer Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 29 Jun 2022 15:57:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 56303 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 56303@debbugs.gnu.org Cc: Remco van 't Veer X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.165651818328147 (code B ref -1); Wed, 29 Jun 2022 15:57:02 +0000 Received: (at submit) by debbugs.gnu.org; 29 Jun 2022 15:56:23 +0000 Received: from localhost ([127.0.0.1]:59950 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1o6a35-0007Jm-LR for submit@debbugs.gnu.org; Wed, 29 Jun 2022 11:56:23 -0400 Received: from lists.gnu.org ([209.51.188.17]:58584) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1o6a2w-0007JV-HV for submit@debbugs.gnu.org; Wed, 29 Jun 2022 11:56:14 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:37698) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1o6a2w-0007Ft-8B for guix-patches@gnu.org; Wed, 29 Jun 2022 11:56:06 -0400 Received: from wout4-smtp.messagingengine.com ([64.147.123.20]:37035) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1o6a2r-0004WB-Io for guix-patches@gnu.org; Wed, 29 Jun 2022 11:56:05 -0400 Received: from compute5.internal (compute5.nyi.internal [10.202.2.45]) by mailout.west.internal (Postfix) with ESMTP id 921F3320091A; Wed, 29 Jun 2022 11:55:58 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute5.internal (MEProxy); Wed, 29 Jun 2022 11:55:58 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=remworks.net; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:message-id:mime-version:reply-to:sender:subject :subject:to:to; s=fm1; t=1656518158; x=1656604558; bh=bwABqcmy+o DSco8Ax7Ai/qFCaUn9BrtLR/0YZ3f0wz8=; b=gnsNVIQXRs6hOiPvcpBOgfuwX5 haXUy3MkRJs3U5WmxrzsGsvbvqJanbaQqtlHB813TXHlSoD0ppBTTtDikeuds9JP kUutdS7oLTppI5PRwRrWZIu1heuEa0VC/TGnWRCM6CcOVByccCR0yrqoEJeLIPcy qs5vg1ZCUMQ/jsou+JRt4z345vhYC+bgfttdI9c/xp0naEnpvMGq1q8Uk2Vifpx1 LLySFDONCVRfKcfpGrTB5f2EpeyzkocDqXK1yiHGYwrEyOhNLfnkt9tvABxMdCi+ 40kavJVv7wXhYUOsCFpHEx0kI1XvsFS89/WCE2MEIZy2Yt5F0JCPjS1XWHug== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:message-id:mime-version:reply-to:sender:subject :subject:to:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm2; t=1656518158; x=1656604558; bh=bwABqcmy+oDSc o8Ax7Ai/qFCaUn9BrtLR/0YZ3f0wz8=; b=jUeOpGo7VnpwjZvJSdQ0aAEBEVqhI QKuN+3ULuhvikS++U+i+VDpJfmeeaLjWnssHLPfoCX5e/DUHOc44/ma/xOvwCzvN nhjdJQ2hTqkBQY568fRAbo0W4wVwF/h2SBRjFR4WUxUOfWmcnSA6QqCZR1TnPINa SwNo8xMjmbOKWfe1eJQyoQlgzZB1dng/+QXRMceMDwyACuHrWM24fbE0UTemFJAM bafqAzkAdyAnHvkt7TkZZFiXwuJ+WWz30E+S9mzK9MDTLAOyJ+ZJQ3SAvLipNV17 QDNqcnYLTjVY6Wm58GunKKbjjgAyLaV9PdGN11ebVf3JIVtjSWXLI9Xcg== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvfedrudegledgleegucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpefhvfevufffkffogggtgfesthekre dtredtjeenucfhrhhomheptfgvmhgtohcuvhgrnhcukdhtucggvggvrhcuoehrvghmtgho sehrvghmfihorhhkshdrnhgvtheqnecuggftrfgrthhtvghrnhephffgiefgtdduuedtke ehudejgeejtdekjeefjefggeeghfeuffdtieevgeegledvnecuvehluhhsthgvrhfuihii vgeptdenucfrrghrrghmpehmrghilhhfrhhomheprhifvhesfhgrshhtmhgrihhlrdgtoh hm X-ME-Proxy: Feedback-ID: i568842cc:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed, 29 Jun 2022 11:55:57 -0400 (EDT) From: Remco van 't Veer Date: Wed, 29 Jun 2022 17:55:55 +0200 Message-Id: <20220629155555.5478-1-remco@remworks.net> X-Mailer: git-send-email 2.36.1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=64.147.123.20; envelope-from=rwv@fastmail.com; helo=wout4-smtp.messagingengine.com X-Spam_score_int: -21 X-Spam_score: -2.2 X-Spam_bar: -- X-Spam_report: (-2.2 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.249, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.249, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1656518260; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=bwABqcmy+oDSco8Ax7Ai/qFCaUn9BrtLR/0YZ3f0wz8=; b=ubHwZUIq3uYtaV0zHMwLQEINCNJK+pgX6FEphjlogrKifDN/OmHA6RJxRgJrjyb4g8zE06 5OQ7zWiqSfBzT7W8XFrPRsh2JjjfUEcRn0NDh8Bly5JsBjwlqJJO4pSOV4m4wyzY3IYtxW bK6oBPMCNtYKIy1dr68x8JoFK+/YO8AWri2Djq/E/LBuZqubiVeZULF/OvorEfLTFf2RKX hailBlMF6UAGPEOBLbHZoMkkS7SlQmi1zE/1sRJ5nC80XH4w8JRDo2LTYk0PCYpGe4h5bZ 2+0UyVg/thBrvHKShPb4MiOGaH4GjjwH/vAO/oHvbAyzH63n9QLTpFf0EJEDhA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1656518260; a=rsa-sha256; cv=none; b=En16EOh5CiohZjNULfIKxu2RxJRWKusRVrVWqjWfWEChK0zKethmwwL95+YioSZaZ0Abb+ if0VH/hAwmAGeBq03jdm2HF1bfDgoIjbRvuYSrVdHct6Lur/5RCRkwSb6r0rHhR3vPU6xo BER4jji7xpw9hfNCWIH5G349rZ0de5bEvM5BOv+4Q8H+uiDkrMYcECxSsd0z1X5goS7SL2 Imab/Ij9CuqQ21sToiVEt2sNjxO98rn3OsYkppAFP+Kkn+nlBnKiexnxbUluWTz9cqM44o Rl2jwv46oCL17qzNmPj5Rgd3A0jBj4HoM9UhpRDzkiB9WOmWCBdTI118IFHi4w== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=remworks.net header.s=fm1 header.b=gnsNVIQX; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm2 header.b=jUeOpGo7; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: 1.75 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=remworks.net header.s=fm1 header.b=gnsNVIQX; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm2 header.b=jUeOpGo7; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: DED0F73B3 X-Spam-Score: 1.75 X-Migadu-Scanner: scn1.migadu.com X-TUID: UQuxqcIWPqt+ Includes fixes for: CVE-2022-28738, CVE-2022-28739, CVE-2021-41819, CVE-2021-41816, and CVE-2021-41817. * gnu/packages/ruby.scm (ruby-3.0): Update to 3.0.4. --- gnu/packages/ruby.scm | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/gnu/packages/ruby.scm b/gnu/packages/ruby.scm index 68e5d8dfd6..41774b4907 100644 --- a/gnu/packages/ruby.scm +++ b/gnu/packages/ruby.scm @@ -28,6 +28,7 @@ ;;; Copyright © 2021 EuAndreh ;;; Copyright © 2020 Tomás Ortín Fernández ;;; Copyright © 2021 Giovanni Biscuolo +;;; Copyright © 2022 Remco van 't Veer ;;; ;;; This file is part of GNU Guix. ;;; @@ -189,7 +190,7 @@ (define-public ruby-2.7 (define-public ruby-3.0 (package (inherit ruby-2.7) - (version "3.0.2") + (version "3.0.4") (source (origin (method url-fetch) @@ -198,7 +199,7 @@ (define-public ruby-3.0 "/ruby-" version ".tar.xz")) (sha256 (base32 - "0h2w2ms4gx2s96v3lzdr3add94bd2qqkhdjzaycmaqhg21rpf3jp")))))) + "1w7jpq3flnm007z5kj8kixgm8l4smb80w8ak4993a12j0irzq8lf")))))) (define-public ruby-3.1 (package -- 2.36.1