From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ben Woodcroft Subject: [PATCH] gnu: ruby: Replace with 2.3.2 [fixes CVE-2015-3900]. Date: Sat, 19 Nov 2016 09:32:09 +1000 Message-ID: <20161118233209.28746-2-donttrustben@gmail.com> References: <20161118233209.28746-1-donttrustben@gmail.com> Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:33778) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1c7sft-00068b-G1 for guix-devel@gnu.org; Fri, 18 Nov 2016 18:34:30 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1c7sfs-00041K-DH for guix-devel@gnu.org; Fri, 18 Nov 2016 18:34:29 -0500 Received: from mail-pg0-x241.google.com ([2607:f8b0:400e:c05::241]:33946) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1c7sfs-00040a-6d for guix-devel@gnu.org; Fri, 18 Nov 2016 18:34:28 -0500 Received: by mail-pg0-x241.google.com with SMTP id e9so21477284pgc.1 for ; Fri, 18 Nov 2016 15:34:28 -0800 (PST) Received: from localhost.localdomain ([103.25.181.216]) by smtp.googlemail.com with ESMTPSA id f14sm20383262pfk.5.2016.11.18.15.34.23 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 18 Nov 2016 15:34:25 -0800 (PST) In-Reply-To: <20161118233209.28746-1-donttrustben@gmail.com> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel@gnu.org * gnu/packages/ruby.scm (ruby)[replacement]: New field. (ruby-2.3.2): New variable. --- gnu/packages/ruby.scm | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/gnu/packages/ruby.scm b/gnu/packages/ruby.scm index e4c1ef0..f2b5de9 100644 --- a/gnu/packages/ruby.scm +++ b/gnu/packages/ruby.scm @@ -47,6 +47,7 @@ (define-public ruby (package (name "ruby") + (replacement ruby-2.3.2) (version "2.3.1") (source (origin @@ -101,6 +102,25 @@ a focus on simplicity and productivity.") (home-page "https://ruby-lang.org") (license license:ruby))) +(define ruby-2.3.2 + (package + (inherit ruby) + (version "2.3.2") + (source + (origin + (method url-fetch) + (uri (string-append "http://cache.ruby-lang.org/pub/ruby/" + (version-major+minor version) + "/ruby-" version ".tar.xz")) + (sha256 + (base32 + "031g76zxb2wp6988dmrpbqd98i17xi6l8q1115h83r2w0h8z6y2w")) + (modules '((guix build utils))) + (snippet `(begin + ;; Remove bundled libffi + (delete-file-recursively "ext/fiddle/libffi-3.2.1") + #t)))))) + (define-public ruby-2.2 (package (inherit ruby) (version "2.2.6") -- 2.10.0