From c83584617406dbd4904034d70d16426b8fd2dc6d Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Tue, 21 Apr 2026 20:59:41 +0200 Subject: [PATCH] package/ruby: security bump version to 4.0.3 https://www.ruby-lang.org/en/news/2026/04/21/ruby-4-0-3-released/ Added sha512 tarball hash provided by upstream. Fixes CVE-2026-41316: https://www.ruby-lang.org/en/news/2026/04/21/erb-cve-2026-41316/ Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain (cherry picked from commit 92746d0dea25125bbda6359dcbeb2f90b192eeef) Signed-off-by: Thomas Perale --- package/ruby/ruby.hash | 5 +++-- package/ruby/ruby.mk | 2 +- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/package/ruby/ruby.hash b/package/ruby/ruby.hash index 9908fe8d4f..7512d1153b 100644 --- a/package/ruby/ruby.hash +++ b/package/ruby/ruby.hash @@ -1,5 +1,6 @@ -# https://www.ruby-lang.org/en/news/2026/03/16/ruby-4-0-2-released/ -sha256 4618db85bb9ec04d8152d0099db488694a3d3c4f52106625e4ad547f1318db87 ruby-4.0.2.tar.xz +# https://www.ruby-lang.org/en/news/2026/04/21/ruby-4-0-3-released/ +sha256 22cf6005d25bbe496b5ebe9224d63a1aaabfbfe02591bb5d612517c5a7836f29 ruby-4.0.3.tar.xz +sha512 5816fb264ce76df59f4bfe0cadceb45025fada2e61f2c14024d6b03f63d304820cddf94afcf82a4951fd12f3b0d9148683f856f3f2245d56042fc8407b6cbff5 ruby-4.0.3.tar.xz # License files, Locally calculated sha256 a74812486cffbdc55141a5d9f165d782cbb202660d827622ec966237d4717b99 LEGAL diff --git a/package/ruby/ruby.mk b/package/ruby/ruby.mk index 6bd8ad43c5..7e6f6d8146 100644 --- a/package/ruby/ruby.mk +++ b/package/ruby/ruby.mk @@ -5,7 +5,7 @@ ################################################################################ RUBY_VERSION_MAJOR = 4.0 -RUBY_VERSION = $(RUBY_VERSION_MAJOR).2 +RUBY_VERSION = $(RUBY_VERSION_MAJOR).3 RUBY_VERSION_EXT = 4.0.0 RUBY_SITE = http://cache.ruby-lang.org/pub/ruby/$(RUBY_VERSION_MAJOR) RUBY_SOURCE = ruby-$(RUBY_VERSION).tar.xz