From: Thomas Perale via buildroot <buildroot@buildroot.org>
To: Bernd Kuhls <bernd@kuhls.net>
Cc: Thomas Perale <thomas.perale@mind.be>, buildroot@buildroot.org
Subject: Re: [Buildroot] [PATCH 1/1] package/ruby: security bump version to 4.0.3
Date: Mon, 4 May 2026 16:48:10 +0200 [thread overview]
Message-ID: <20260504144810.11144-1-thomas.perale@mind.be> (raw)
In-Reply-To: <20260421185941.2721885-1-bernd@kuhls.net>
In reply of:
> https://www.ruby-lang.org/en/news/2026/04/21/ruby-4-0-3-released/
>
> Added sha512 tarball hash provided by upstream.
>
> Fixes CVE-2026-41316:
> https://www.ruby-lang.org/en/news/2026/04/21/erb-cve-2026-41316/
>
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Applied to 2026.02.x. Thanks
> ---
> package/ruby/ruby.hash | 5 +++--
> package/ruby/ruby.mk | 2 +-
> 2 files changed, 4 insertions(+), 3 deletions(-)
>
> diff --git a/package/ruby/ruby.hash b/package/ruby/ruby.hash
> index 9908fe8d4f..7512d1153b 100644
> --- a/package/ruby/ruby.hash
> +++ b/package/ruby/ruby.hash
> @@ -1,5 +1,6 @@
> -# https://www.ruby-lang.org/en/news/2026/03/16/ruby-4-0-2-released/
> -sha256 4618db85bb9ec04d8152d0099db488694a3d3c4f52106625e4ad547f1318db87 ruby-4.0.2.tar.xz
> +# https://www.ruby-lang.org/en/news/2026/04/21/ruby-4-0-3-released/
> +sha256 22cf6005d25bbe496b5ebe9224d63a1aaabfbfe02591bb5d612517c5a7836f29 ruby-4.0.3.tar.xz
> +sha512 5816fb264ce76df59f4bfe0cadceb45025fada2e61f2c14024d6b03f63d304820cddf94afcf82a4951fd12f3b0d9148683f856f3f2245d56042fc8407b6cbff5 ruby-4.0.3.tar.xz
>
> # License files, Locally calculated
> sha256 a74812486cffbdc55141a5d9f165d782cbb202660d827622ec966237d4717b99 LEGAL
> diff --git a/package/ruby/ruby.mk b/package/ruby/ruby.mk
> index 6bd8ad43c5..7e6f6d8146 100644
> --- a/package/ruby/ruby.mk
> +++ b/package/ruby/ruby.mk
> @@ -5,7 +5,7 @@
> ################################################################################
>
> RUBY_VERSION_MAJOR = 4.0
> -RUBY_VERSION = $(RUBY_VERSION_MAJOR).2
> +RUBY_VERSION = $(RUBY_VERSION_MAJOR).3
> RUBY_VERSION_EXT = 4.0.0
> RUBY_SITE = http://cache.ruby-lang.org/pub/ruby/$(RUBY_VERSION_MAJOR)
> RUBY_SOURCE = ruby-$(RUBY_VERSION).tar.xz
> --
> 2.47.3
>
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
prev parent reply other threads:[~2026-05-04 14:48 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-04-21 18:59 [Buildroot] [PATCH 1/1] package/ruby: security bump version to 4.0.3 Bernd Kuhls
2026-04-21 20:31 ` Julien Olivain via buildroot
2026-05-04 14:48 ` Thomas Perale via buildroot [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260504144810.11144-1-thomas.perale@mind.be \
--to=buildroot@buildroot.org \
--cc=bernd@kuhls.net \
--cc=thomas.perale@mind.be \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.