gnu: ruby: Replace with ruby-2.3.2 [fixes CVE-2015-3900].

* gnu/packages/ruby.scm (ruby)[replacement]: New field.
(ruby-2.3.2): New variable.
This commit is contained in:
Ben Woodcroft 2016-11-19 09:00:22 +10:00
parent 966a543b36
commit 9b62c5a8fb
No known key found for this signature in database
GPG key ID: E44DCCD146E0CCF4

View file

@ -47,6 +47,7 @@ (define-module (gnu packages ruby)
(define-public ruby
(package
(name "ruby")
(replacement ruby-2.3.2)
(version "2.3.1")
(source
(origin
@ -101,6 +102,25 @@ (define-public ruby
(home-page "https://ruby-lang.org")
(license license:ruby)))
(define ruby-2.3.2
(package
(inherit ruby)
(version "2.3.2")
(source
(origin
(method url-fetch)
(uri (string-append "http://cache.ruby-lang.org/pub/ruby/"
(version-major+minor version)
"/ruby-" version ".tar.xz"))
(sha256
(base32
"031g76zxb2wp6988dmrpbqd98i17xi6l8q1115h83r2w0h8z6y2w"))
(modules '((guix build utils)))
(snippet `(begin
;; Remove bundled libffi
(delete-file-recursively "ext/fiddle/libffi-3.2.1")
#t))))))
(define-public ruby-2.2
(package (inherit ruby)
(version "2.2.6")