ruby: update to 3.2.4
authorLuiz Angelo Daros de Luca <luizluca@gmail.com>
Mon, 3 Jun 2024 03:44:22 +0000 (00:44 -0300)
committerTianling Shen <cnsztl@gmail.com>
Mon, 17 Jun 2024 08:23:24 +0000 (16:23 +0800)
commit287d5b8653a946858da43f1e10261d98722c37ba
tree8b4f4a4a72b023e7ab64f66c1141fb15d4417e26
parent2919fae481cba4ca548910b92af5152e61c0aa93
ruby: update to 3.2.4

The 3.2.3 release includes many bug-fixes. This release also includes
the update of uri.gem to 0.12.2 which contains the security fix.

- CVE-2023-36617: ReDoS vulnerability in URI

See: https://www.ruby-lang.org/en/news/2024/01/18/ruby-3-2-3-released/

The 3.2.4 release includes security fixes. Please check the topics below
for details.

- CVE-2024-27282: Arbitrary memory address read vulnerability with Regex search
- CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc
- CVE-2024-27280: Buffer overread vulnerability in StringIO

See: https://www.ruby-lang.org/en/news/2024/04/23/ruby-3-2-4-released/

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
lang/ruby/Makefile