From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <guix-patches-bounces+larch=yhetil.org@gnu.org>
Received: from mp12.migadu.com ([2001:41d0:2:bcc0::])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))
	by ms5.migadu.com with LMTPS
	id yN0iAH0YgWOTagEAbAwnHQ
	(envelope-from <guix-patches-bounces+larch=yhetil.org@gnu.org>)
	for <larch@yhetil.org>; Fri, 25 Nov 2022 20:33:17 +0100
Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))
	by mp12.migadu.com with LMTPS
	id 6LUMAH0YgWOcCwEAauVa8A
	(envelope-from <guix-patches-bounces+larch=yhetil.org@gnu.org>)
	for <larch@yhetil.org>; Fri, 25 Nov 2022 20:33:17 +0100
Received: from lists.gnu.org (lists.gnu.org [209.51.188.17])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by aspmx1.migadu.com (Postfix) with ESMTPS id C169914CEF
	for <larch@yhetil.org>; Fri, 25 Nov 2022 20:33:16 +0100 (CET)
Received: from localhost ([::1] helo=lists1p.gnu.org)
	by lists.gnu.org with esmtp (Exim 4.90_1)
	(envelope-from <guix-patches-bounces@gnu.org>)
	id 1oyeRc-0003ia-He; Fri, 25 Nov 2022 14:33:04 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <Debian-debbugs@debbugs.gnu.org>)
 id 1oyeRa-0003i8-LE
 for guix-patches@gnu.org; Fri, 25 Nov 2022 14:33:02 -0500
Received: from debbugs.gnu.org ([209.51.188.43])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
 (Exim 4.90_1) (envelope-from <Debian-debbugs@debbugs.gnu.org>)
 id 1oyeRa-0007LZ-78
 for guix-patches@gnu.org; Fri, 25 Nov 2022 14:33:02 -0500
Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2)
 (envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1oyeRa-00019q-2L
 for guix-patches@gnu.org; Fri, 25 Nov 2022 14:33:02 -0500
X-Loop: help-debbugs@gnu.org
Subject: [bug#59583] [PATCH] gnu: ruby-3.0: Update to 3.0.5. [security fixes].
Resent-From: Remco van 't Veer <remco@remworks.net>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
Resent-CC: guix-patches@gnu.org
Resent-Date: Fri, 25 Nov 2022 19:33:01 +0000
Resent-Message-ID: <handler.59583.B.16694047494405@debbugs.gnu.org>
Resent-Sender: help-debbugs@gnu.org
X-GNU-PR-Message: report 59583
X-GNU-PR-Package: guix-patches
X-GNU-PR-Keywords: patch
To: 59583@debbugs.gnu.org
Cc: Remco van 't Veer <remco@remworks.net>
X-Debbugs-Original-To: guix-patches@gnu.org
Received: via spool by submit@debbugs.gnu.org id=B.16694047494405
 (code B ref -1); Fri, 25 Nov 2022 19:33:01 +0000
Received: (at submit) by debbugs.gnu.org; 25 Nov 2022 19:32:29 +0000
Received: from localhost ([127.0.0.1]:37198 helo=debbugs.gnu.org)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
 id 1oyeR3-00018y-DU
 for submit@debbugs.gnu.org; Fri, 25 Nov 2022 14:32:29 -0500
Received: from lists.gnu.org ([209.51.188.17]:57192)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <rwv@fastmail.com>) id 1oyeR1-00018q-8c
 for submit@debbugs.gnu.org; Fri, 25 Nov 2022 14:32:27 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <rwv@fastmail.com>) id 1oyeR1-0003WW-32
 for guix-patches@gnu.org; Fri, 25 Nov 2022 14:32:27 -0500
Received: from wout1-smtp.messagingengine.com ([64.147.123.24])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <rwv@fastmail.com>) id 1oyeQz-0006wD-GU
 for guix-patches@gnu.org; Fri, 25 Nov 2022 14:32:26 -0500
Received: from compute2.internal (compute2.nyi.internal [10.202.2.46])
 by mailout.west.internal (Postfix) with ESMTP id 063D73200201;
 Fri, 25 Nov 2022 14:32:21 -0500 (EST)
Received: from mailfrontend2 ([10.202.2.163])
 by compute2.internal (MEProxy); Fri, 25 Nov 2022 14:32:22 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=remworks.net; h=
 cc:cc:content-transfer-encoding:date:date:from:from:in-reply-to
 :message-id:mime-version:reply-to:sender:subject:subject:to:to;
 s=fm3; t=1669404740; x=1669491140; bh=JHrdK0aHjPDQkmS6hvByDf7Au
 gknvqck+4wHpeO5kZs=; b=uB37thtEkMSWmqpW+x/uSVMmhbYmW485rGNJXWsaO
 UqnmdZX+UFj0HM/ClBUEO43ptyfDC3tZPPucwmfSwyTYybUc3rPm1hDyYvyEPDk3
 Fu/SJRFLlKCjG5/XpuwqcnAH6RCS+d5ZVpiOzxhZHcwVkhWuI/o6TZNaO4drEn/u
 RGOpZmdsE5w/i4SUKd6VBtB509mG9u0pcSRW+BmonWZ77DCJ9A1sBl87Fja48S9q
 S6kS7r47N48hnqBuTsq7QW2iWKPy9ENDhzvGnosEjkbqQNu8k+AYU/Eyn7MEq/LF
 IEaHqiZqqQBM+KMKxTXssDOspMir/B6MU2bCca/Blavqg==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:cc:content-transfer-encoding:date:date
 :feedback-id:feedback-id:from:from:in-reply-to:message-id
 :mime-version:reply-to:sender:subject:subject:to:to:x-me-proxy
 :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t=
 1669404740; x=1669491140; bh=JHrdK0aHjPDQkmS6hvByDf7Augknvqck+4w
 HpeO5kZs=; b=pmzZWja3qBuTEAHHLEVD/wiBsHfql6yJjhLaXfQQAqVBGEoJTA+
 pXmM4KWoqqqAgULyh2Gj4dTCR559Cynk1o5XRV7BR4BnXg5UkcPGhcuUhNJdWc4l
 C4XqXUcB8L3psnApZlzNsIoGyWQbiOPazaDYw5lH00uV1d3zpgVGY0/r0vnHCH26
 leY1cg+6Zg2ahAhwKmPih6V4/6IsLToV9tRH8uHKLaK8oi1GWChI/yjREWzFtyys
 nGJuSrscJOG4mWWmxVhwtSzDG5V4t8TbZ2+OvAnr02WC1KDF1PoU876l2nz3RtTP
 WS5WvrGOV4sO+xkwMHhFcJYu59qDszBuquA==
X-ME-Sender: <xms:RBiBY0LEja4jOzJdzGx7DnRDdPfBUb4IYC68stI02sYCQLeK_ptDFA>
 <xme:RBiBY0L4fSEqdA-FPSqrX4C0U1P-WFN2GT39AFpt97vEbxPuOk4j9Awgg_aJjhp9W
 AHGTvAfS10-fm_9PQ>
X-ME-Received: <xmr:RBiBY0tY5n87NI4DzViYTzubPGl0wUcJmPAzmapxk-Rg90LusDphsQt8dDNG9cAKK1WhbZNNmH9Avk0rbjpsdvEKEvq9ew>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvgedrieehgdduvdeiucetufdoteggodetrfdotf
 fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
 uceurghilhhouhhtmecufedttdenucenucfjughrpefhvfevufffkffoggfgsedtkeertd
 ertddtnecuhfhrohhmpeftvghmtghouchvrghnucdkthcugggvvghruceorhgvmhgtohes
 rhgvmhifohhrkhhsrdhnvghtqeenucggtffrrghtthgvrhhnpeegueeggfdtheffhedtie
 ejuddugffgtddvueeftedtuefhtdffjeelgeefvdetieenucevlhhushhtvghrufhiiigv
 pedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehrfihvsehfrghsthhmrghilhdrtghomh
X-ME-Proxy: <xmx:RBiBYxZmbhzxZLNJGnv0Uje8OOgZ18krT10hIeWJkAx18dWNvKF9jg>
 <xmx:RBiBY7b_RLceaQyITn4DX-kWvN-d5qYFpEsZbOlwTfrIqUKoanGw5g>
 <xmx:RBiBY9AAzRYtwRhvuCyLIA6VkS_fEQddmIDxYAX3M2u6rZx27RfUHQ>
 <xmx:RBiBY8ATrA0VSKgGndYwSlOAbXd-eT1QdgVckXtAs10_CXQite8zyg>
Feedback-ID: i568842cc:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Fri,
 25 Nov 2022 14:32:19 -0500 (EST)
From: Remco van 't Veer <remco@remworks.net>
Date: Fri, 25 Nov 2022 20:32:11 +0100
Message-Id: <20221125193211.26730-1-remco@remworks.net>
X-Mailer: git-send-email 2.38.1
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Received-SPF: pass client-ip=64.147.123.24; envelope-from=rwv@fastmail.com;
 helo=wout1-smtp.messagingengine.com
X-Spam_score_int: -21
X-Spam_score: -2.2
X-Spam_bar: --
X-Spam_report: (-2.2 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.243,
 FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25,
 RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001,
 SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
X-BeenThere: guix-patches@gnu.org
List-Id: <guix-patches.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/guix-patches>,
 <mailto:guix-patches-request@gnu.org?subject=unsubscribe>
List-Archive: <https://lists.gnu.org/archive/html/guix-patches>
List-Post: <mailto:guix-patches@gnu.org>
List-Help: <mailto:guix-patches-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/guix-patches>,
 <mailto:guix-patches-request@gnu.org?subject=subscribe>
Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org
Sender: guix-patches-bounces+larch=yhetil.org@gnu.org
X-Migadu-Flow: FLOW_IN
X-Migadu-Country: US
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org;
	s=key1; t=1669404796;
	h=from:from:sender:sender:reply-to:subject:subject:date:date:
	 message-id:message-id:to:to:cc:cc:mime-version:mime-version:
	 content-transfer-encoding:content-transfer-encoding:resent-cc:
	 resent-from:resent-sender:resent-message-id:list-id:list-help:
	 list-unsubscribe:list-subscribe:list-post:dkim-signature;
	bh=JHrdK0aHjPDQkmS6hvByDf7Augknvqck+4wHpeO5kZs=;
	b=R3NcPGq+v3SY0fkHeb29xUN/cincVxEZ2TDMdCVWq1VuZLrptzEpWN+Af/KUVfXT/1S0ij
	lT6pjwCXHhbOA9aY8PSw24MZtdWJKzG5sK0U+FUNxU8O+RdW3e5bDShODGHi9D+BJbPG1C
	ZQ/4kvh9Nz328jbh2hbSUrYK0T4opOEFB0KeQChv/BhKKwI3JI3iyv0VxqTknwsSwx7cot
	oRWbMKaL6Rs2ogVskpPzyuJYL0jEbND9VW1Sx10OJxjUfNYCMw8sgxq7gpc7jp66Nev8Hc
	RK26AiKX9MxmGq09Ffz1sa3O0/y87Umab73fsT+3mnC7OXWDlxOXhLivUSx/5Q==
ARC-Seal: i=1; s=key1; d=yhetil.org; t=1669404796; a=rsa-sha256; cv=none;
	b=tVKNqqnBBMIbhNn0PFfTF0yEXa3zFGmuga7udq+6RubvdkNstJX7TppiYOC85RDBztbw0R
	IcmL5fDFB0k9E6d6RE/ctXQ1w2UBBJSsBjYUVcuJRUzERTM3vkN0WAAIVbRQMj+vPXIsPN
	snBARMNIsbIT1gdhJx4mD1pR48CuylPT3Weeb1fK9XJk6fxCIv7DqaMEagWOmnofBBYyBK
	65uY8iRj7lVWzPEEGViUOmWgD09c431G7gJ8CDLhfM+Pr2JTWHnj3uHixmiClQlt60btR8
	MQdx95xjmawH8bCf0h4jN2gB5oIHbvW7pks7NtCqHbPq5HZgssR37Ag8Ll/ulw==
ARC-Authentication-Results: i=1;
	aspmx1.migadu.com;
	dkim=fail ("headers rsa verify failed") header.d=remworks.net header.s=fm3 header.b=uB37thtE;
	dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm1 header.b=pmzZWja3;
	dmarc=none;
	spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"
X-Migadu-Spam-Score: 1.83
Authentication-Results: aspmx1.migadu.com;
	dkim=fail ("headers rsa verify failed") header.d=remworks.net header.s=fm3 header.b=uB37thtE;
	dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm1 header.b=pmzZWja3;
	dmarc=none;
	spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"
X-Migadu-Queue-Id: C169914CEF
X-Spam-Score: 1.83
X-Migadu-Scanner: scn0.migadu.com
X-TUID: MPGdL/XUGui2

Fixes: CVE-2021-33621: HTTP response splitting in CGI.

* gnu/packages/ruby.scm (ruby-3.0): Update to 3.0.5.
---
 gnu/packages/ruby.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/ruby.scm b/gnu/packages/ruby.scm
index b53aa02ef3..780960c4fb 100644
--- a/gnu/packages/ruby.scm
+++ b/gnu/packages/ruby.scm
@@ -208,7 +208,7 @@ (define ruby-2.7-fixed
 (define-public ruby-3.0
   (package
     (inherit ruby-2.7)
-    (version "3.0.4")
+    (version "3.0.5")
     (source
      (origin
        (method url-fetch)
@@ -217,7 +217,7 @@ (define-public ruby-3.0
                            "/ruby-" version ".tar.xz"))
        (sha256
         (base32
-         "1w7jpq3flnm007z5kj8kixgm8l4smb80w8ak4993a12j0irzq8lf"))))
+         "1pnxbdkkh2miq9nqfq2qscvh76nprzg0r620d9ckdzih42xbaz6g"))))
     (inputs
      (modify-inputs (package-inputs ruby-2.7)
        (replace "openssl" openssl)))))
-- 
2.38.1