Skip to content

Commit 2cf084a

Browse files
authored
Merge pull request #3184 from ruby/release_3_2_3
Release ruby 3.2.3
2 parents ec97e26 + c420868 commit 2cf084a

6 files changed

+128
-3
lines changed

_data/downloads.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ preview:
88
stable:
99

1010
- 3.3.0
11-
- 3.2.2
11+
- 3.2.3
1212
- 3.1.4
1313

1414
# optional

_data/releases.yml

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -168,6 +168,30 @@
168168

169169
# 3.2 series
170170

171+
- version: 3.2.3
172+
date: '2024-01-18'
173+
post: "/en/news/2024/01/18/ruby-3-2-3-released/"
174+
url:
175+
gz: https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.3.tar.gz
176+
xz: https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.3.tar.xz
177+
zip: https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.3.zip
178+
size:
179+
gz: 20577155
180+
xz: 15163960
181+
zip: 24734275
182+
sha1:
183+
gz: 7f553e514cb42751a61c3a560a7e8d727c6931ca
184+
xz: '08e0016c8b96103930aaa3b2323081d8f5756e25'
185+
zip: e305dfe36229c5328d231ea0ac03ae5e05bfaca6
186+
sha256:
187+
gz: af7f1757d9ddb630345988139211f1fd570ff5ba830def1cc7c468ae9b65c9ba
188+
xz: cfb231954b8c241043a538a4c682a1cca0b2016d835fee0b9e4a0be3ceba476b
189+
zip: 42aa39f74e5be9e24e4db47e7bfb15dc7e095f7e2295859b355edccf6fab96a2
190+
sha512:
191+
gz: 75aecd9cf87f1fa66b24ecda8837a53162071b4f8801dcfd79119a24c6e81df3e3e2ba478e1cc48c60103dfaab12a00cfa2039a621f8651298eba8bd8d576360
192+
xz: d2a1897c2f4e801a28acb869322abfee76775115016252cecad90639485ed51deda1446cb16edb387f10a2e188602d646ef9b008b57f27bd745071277c535f3b
193+
zip: fd89a0a833df4b5cb1734a7ffc86a8cf7cb3a8e25944331db674d3ad7732f615867e7e214e1fdd61e44e9c9c856b461b46219b340de7c87a758f28f3a99dd172
194+
171195
- version: 3.2.2
172196
date: '2023-03-30'
173197
post: "/en/news/2023/03/30/ruby-3-2-2-released/"

en/news/_posts/2023-06-29-redos-in-uri-CVE-2023-36617.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,8 @@ The `uri` gem version 0.12.1 and all versions prior 0.12.1 are vulnerable for th
2424
We recommend to update the `uri` gem to 0.12.2. In order to ensure compatibility with bundled version in older Ruby series, you may update as follows instead:
2525

2626
* For Ruby 3.0: Update to `uri` 0.10.3
27-
* For Ruby 3.1 and 3.2: Update to `uri` 0.12.2
27+
* For Ruby 3.1: Update to `uri` 0.12.2
28+
* For Ruby 3.2: Update to `uri` 0.12.2, or update to Ruby 3.2.3
2829

2930
You can use `gem update uri` to update it. If you are using bundler, please add `gem "uri", ">= 0.12.2"` (or other version mentioned above) to your `Gemfile`.
3031

@@ -40,4 +41,5 @@ Thanks to [nobu](https://github.com/nobu) for fixing this issue.
4041

4142
## History
4243

44+
* Added a new recommended action for Ruby 3.2 at 2024-01-18 12:00:00 (UTC)
4345
* Originally published at 2023-06-29 01:00:00 (UTC)
Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
---
2+
layout: news_post
3+
title: "Ruby 3.2.3 Released"
4+
author: "nagachika"
5+
translator:
6+
date: 2024-01-18 09:00:00 +0000
7+
lang: en
8+
---
9+
10+
Ruby 3.2.3 has been released.
11+
12+
This release includes many bug-fixes.
13+
See the [GitHub releases](https://github.com/ruby/ruby/releases/tag/v3_2_3) for further details.
14+
15+
This release also includes the update of uri.gem to 0.12.2 which contains the security fix.
16+
Please check the topics below for details.
17+
18+
* [CVE-2023-36617: ReDoS vulnerability in URI]({%link en/news/_posts/2023-06-29-redos-in-uri-CVE-2023-36617.md %})
19+
20+
## Download
21+
22+
{% assign release = site.data.releases | where: "version", "3.2.3" | first %}
23+
24+
* <{{ release.url.gz }}>
25+
26+
SIZE: {{ release.size.gz }}
27+
SHA1: {{ release.sha1.gz }}
28+
SHA256: {{ release.sha256.gz }}
29+
SHA512: {{ release.sha512.gz }}
30+
31+
* <{{ release.url.xz }}>
32+
33+
SIZE: {{ release.size.xz }}
34+
SHA1: {{ release.sha1.xz }}
35+
SHA256: {{ release.sha256.xz }}
36+
SHA512: {{ release.sha512.xz }}
37+
38+
* <{{ release.url.zip }}>
39+
40+
SIZE: {{ release.size.zip }}
41+
SHA1: {{ release.sha1.zip }}
42+
SHA256: {{ release.sha256.zip }}
43+
SHA512: {{ release.sha512.zip }}
44+
45+
## Release Comment
46+
47+
Many committers, developers, and users who provided bug reports helped us make this release.
48+
Thanks for their contributions.

ja/news/_posts/2023-06-29-redos-in-uri-CVE-2023-36617.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,8 @@ ReDoS 脆弱性のセキュリティ修正を含む、uri gem 0.12.2、0.10.3
2424
`uri` gem を 0.12.2 にアップデートすることを推奨します。古い系列の Ruby で同梱されているバージョンとの互換性を確保するためには、以下のようにアップデートできます:
2525

2626
* Ruby 3.0: `uri` を 0.10.3 にアップデート
27-
* Ruby 3.1 および 3.2: `uri` を 0.12.2 にアップデート
27+
* Ruby 3.1: `uri` を 0.12.2 にアップデート
28+
* Ruby 3.2: `uri` を 0.12.2 にアップデート、もしくは Ruby 3.2.3 以降にアップデート
2829

2930
`gem update uri` でアップデートできます。もし bundler を使っている場合は、`Gemfile``gem "uri", ">= 0.12.2"` (または上記の他のバージョン)を追加してください。
3031

@@ -40,4 +41,5 @@ ReDoS 脆弱性のセキュリティ修正を含む、uri gem 0.12.2、0.10.3
4041

4142
## 更新履歴
4243

44+
* 2024-01-18 19:00:00 (JST) Ruby 3.2 での対応を追加
4345
* 2023-06-29 10:00:00 (JST) 初版
Lines changed: 49 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,49 @@
1+
---
2+
layout: news_post
3+
title: "Ruby 3.2.3 リリース"
4+
author: "nagachika"
5+
translator:
6+
date: 2024-01-18 09:00:00 +0000
7+
lang: ja
8+
---
9+
10+
Ruby 3.2.3 がリリースされました。
11+
12+
このリリースでは多くの不具合修正を行なっています。
13+
詳しくは [GitHub releases](https://github.com/ruby/ruby/releases/tag/v3_2_3) を参照してください。
14+
15+
このリリースでは default gem の uri.gem のバージョンを脆弱性修正を含む 0.12.2 に更新しています。
16+
詳しくは以下の記事を参照してください。
17+
18+
* [CVE-2023-36617: URI における ReDoS 脆弱性について]({%link ja/news/_posts/2023-06-29-redos-in-uri-CVE-2023-36617.md %})
19+
20+
21+
## ダウンロード
22+
23+
{% assign release = site.data.releases | where: "version", "3.2.3" | first %}
24+
25+
* <{{ release.url.gz }}>
26+
27+
SIZE: {{ release.size.gz }}
28+
SHA1: {{ release.sha1.gz }}
29+
SHA256: {{ release.sha256.gz }}
30+
SHA512: {{ release.sha512.gz }}
31+
32+
* <{{ release.url.xz }}>
33+
34+
SIZE: {{ release.size.xz }}
35+
SHA1: {{ release.sha1.xz }}
36+
SHA256: {{ release.sha256.xz }}
37+
SHA512: {{ release.sha512.xz }}
38+
39+
* <{{ release.url.zip }}>
40+
41+
SIZE: {{ release.size.zip }}
42+
SHA1: {{ release.sha1.zip }}
43+
SHA256: {{ release.sha256.zip }}
44+
SHA512: {{ release.sha512.zip }}
45+
46+
## リリースコメント
47+
48+
Ruby 開発者の皆様、バグや脆弱性を報告してくれたユーザーの皆様のご協力により本リリースは行われています。
49+
皆様のご協力に感謝します。

0 commit comments

Comments
 (0)