[23.05] ruby: update to 3.2.4 - Githubissues

openwrt / packages

Community maintained packages for OpenWrt. Documentation for submitting pull requests is in CONTRIBUTING.md

GNU General Public License v2.0

3.88k stars 3.39k forks source link

[23.05] ruby: update to 3.2.4 #24390

Closed luizluca closed 1 week ago

luizluca commented 1 week ago

The 3.2.3 release includes many bug-fixes. This release also includes the update of uri.gem to 0.12.2 which contains the security fix.

CVE-2023-36617: ReDoS vulnerability in URI

See: https://www.ruby-lang.org/en/news/2024/01/18/ruby-3-2-3-released/

The 3.2.4 release includes security fixes. Please check the topics below for details.

CVE-2024-27282: Arbitrary memory address read vulnerability with Regex search
CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc
CVE-2024-27280: Buffer overread vulnerability in StringIO

See: https://www.ruby-lang.org/en/news/2024/04/23/ruby-3-2-4-released/

Maintainer: me Compile tested: x86 Run tested: none

Description: