diff --git a/_data/downloads.yml b/_data/downloads.yml index a0c0527617..9bb4c48899 100644 --- a/_data/downloads.yml +++ b/_data/downloads.yml @@ -8,7 +8,7 @@ preview: stable: - 3.3.0 - - 3.2.2 + - 3.2.3 - 3.1.4 # optional diff --git a/_data/releases.yml b/_data/releases.yml index 2a838b0b6b..ba23f794e1 100644 --- a/_data/releases.yml +++ b/_data/releases.yml @@ -168,6 +168,30 @@ # 3.2 series +- version: 3.2.3 + date: '2024-01-18' + post: "/en/news/2024/01/18/ruby-3-2-3-released/" + url: + gz: https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.3.tar.gz + xz: https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.3.tar.xz + zip: https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.3.zip + size: + gz: 20577155 + xz: 15163960 + zip: 24734275 + sha1: + gz: 7f553e514cb42751a61c3a560a7e8d727c6931ca + xz: '08e0016c8b96103930aaa3b2323081d8f5756e25' + zip: e305dfe36229c5328d231ea0ac03ae5e05bfaca6 + sha256: + gz: af7f1757d9ddb630345988139211f1fd570ff5ba830def1cc7c468ae9b65c9ba + xz: cfb231954b8c241043a538a4c682a1cca0b2016d835fee0b9e4a0be3ceba476b + zip: 42aa39f74e5be9e24e4db47e7bfb15dc7e095f7e2295859b355edccf6fab96a2 + sha512: + gz: 75aecd9cf87f1fa66b24ecda8837a53162071b4f8801dcfd79119a24c6e81df3e3e2ba478e1cc48c60103dfaab12a00cfa2039a621f8651298eba8bd8d576360 + xz: d2a1897c2f4e801a28acb869322abfee76775115016252cecad90639485ed51deda1446cb16edb387f10a2e188602d646ef9b008b57f27bd745071277c535f3b + zip: fd89a0a833df4b5cb1734a7ffc86a8cf7cb3a8e25944331db674d3ad7732f615867e7e214e1fdd61e44e9c9c856b461b46219b340de7c87a758f28f3a99dd172 + - version: 3.2.2 date: '2023-03-30' post: "/en/news/2023/03/30/ruby-3-2-2-released/" diff --git a/en/news/_posts/2023-06-29-redos-in-uri-CVE-2023-36617.md b/en/news/_posts/2023-06-29-redos-in-uri-CVE-2023-36617.md index 332794fdc9..fd68aa5252 100644 --- a/en/news/_posts/2023-06-29-redos-in-uri-CVE-2023-36617.md +++ b/en/news/_posts/2023-06-29-redos-in-uri-CVE-2023-36617.md @@ -24,7 +24,8 @@ The `uri` gem version 0.12.1 and all versions prior 0.12.1 are vulnerable for th We recommend to update the `uri` gem to 0.12.2. In order to ensure compatibility with bundled version in older Ruby series, you may update as follows instead: * For Ruby 3.0: Update to `uri` 0.10.3 -* For Ruby 3.1 and 3.2: Update to `uri` 0.12.2 +* For Ruby 3.1: Update to `uri` 0.12.2 +* For Ruby 3.2: Update to `uri` 0.12.2, or update to Ruby 3.2.3 You can use `gem update uri` to update it. If you are using bundler, please add `gem "uri", ">= 0.12.2"` (or other version mentioned above) to your `Gemfile`. @@ -40,4 +41,5 @@ Thanks to [nobu](https://github.com/nobu) for fixing this issue. ## History +* Added a new recommended action for Ruby 3.2 at 2024-01-18 12:00:00 (UTC) * Originally published at 2023-06-29 01:00:00 (UTC) diff --git a/en/news/_posts/2024-01-18-ruby-3-2-3-released.md b/en/news/_posts/2024-01-18-ruby-3-2-3-released.md new file mode 100644 index 0000000000..3921bcbbee --- /dev/null +++ b/en/news/_posts/2024-01-18-ruby-3-2-3-released.md @@ -0,0 +1,48 @@ +--- +layout: news_post +title: "Ruby 3.2.3 Released" +author: "nagachika" +translator: +date: 2024-01-18 09:00:00 +0000 +lang: en +--- + +Ruby 3.2.3 has been released. + +This release includes many bug-fixes. +See the [GitHub releases](https://github.com/ruby/ruby/releases/tag/v3_2_3) for further details. + +This release also includes the update of uri.gem to 0.12.2 which contains the security fix. +Please check the topics below for details. + +* [CVE-2023-36617: ReDoS vulnerability in URI]({%link en/news/_posts/2023-06-29-redos-in-uri-CVE-2023-36617.md %}) + +## Download + +{% assign release = site.data.releases | where: "version", "3.2.3" | first %} + +* <{{ release.url.gz }}> + + SIZE: {{ release.size.gz }} + SHA1: {{ release.sha1.gz }} + SHA256: {{ release.sha256.gz }} + SHA512: {{ release.sha512.gz }} + +* <{{ release.url.xz }}> + + SIZE: {{ release.size.xz }} + SHA1: {{ release.sha1.xz }} + SHA256: {{ release.sha256.xz }} + SHA512: {{ release.sha512.xz }} + +* <{{ release.url.zip }}> + + SIZE: {{ release.size.zip }} + SHA1: {{ release.sha1.zip }} + SHA256: {{ release.sha256.zip }} + SHA512: {{ release.sha512.zip }} + +## Release Comment + +Many committers, developers, and users who provided bug reports helped us make this release. +Thanks for their contributions. diff --git a/ja/news/_posts/2023-06-29-redos-in-uri-CVE-2023-36617.md b/ja/news/_posts/2023-06-29-redos-in-uri-CVE-2023-36617.md index 26979dc2d1..57d3407ed4 100644 --- a/ja/news/_posts/2023-06-29-redos-in-uri-CVE-2023-36617.md +++ b/ja/news/_posts/2023-06-29-redos-in-uri-CVE-2023-36617.md @@ -24,7 +24,8 @@ ReDoS 脆弱性のセキュリティ修正を含む、uri gem 0.12.2、0.10.3 `uri` gem を 0.12.2 にアップデートすることを推奨します。古い系列の Ruby で同梱されているバージョンとの互換性を確保するためには、以下のようにアップデートできます： * Ruby 3.0: `uri` を 0.10.3 にアップデート -* Ruby 3.1 および 3.2: `uri` を 0.12.2 にアップデート +* Ruby 3.1: `uri` を 0.12.2 にアップデート +* Ruby 3.2: `uri` を 0.12.2 にアップデート、もしくは Ruby 3.2.3 以降にアップデート `gem update uri` でアップデートできます。もし bundler を使っている場合は、`Gemfile` に `gem "uri", ">= 0.12.2"` （または上記の他のバージョン）を追加してください。 @@ -40,4 +41,5 @@ ReDoS 脆弱性のセキュリティ修正を含む、uri gem 0.12.2、0.10.3 ## 更新履歴 +* 2024-01-18 19:00:00 (JST) Ruby 3.2 での対応を追加 * 2023-06-29 10:00:00 (JST) 初版 diff --git a/ja/news/_posts/2024-01-18-ruby-3-2-3-released.md b/ja/news/_posts/2024-01-18-ruby-3-2-3-released.md new file mode 100644 index 0000000000..6fe81850db --- /dev/null +++ b/ja/news/_posts/2024-01-18-ruby-3-2-3-released.md @@ -0,0 +1,49 @@ +--- +layout: news_post +title: "Ruby 3.2.3 リリース" +author: "nagachika" +translator: +date: 2024-01-18 09:00:00 +0000 +lang: ja +--- + +Ruby 3.2.3 がリリースされました。 + +このリリースでは多くの不具合修正を行なっています。 +詳しくは [GitHub releases](https://github.com/ruby/ruby/releases/tag/v3_2_3) を参照してください。 + +このリリースでは default gem の uri.gem のバージョンを脆弱性修正を含む 0.12.2 に更新しています。 +詳しくは以下の記事を参照してください。 + +* [CVE-2023-36617: URI における ReDoS 脆弱性について]({%link ja/news/_posts/2023-06-29-redos-in-uri-CVE-2023-36617.md %}) + + +## ダウンロード + +{% assign release = site.data.releases | where: "version", "3.2.3" | first %} + +* <{{ release.url.gz }}> + + SIZE: {{ release.size.gz }} + SHA1: {{ release.sha1.gz }} + SHA256: {{ release.sha256.gz }} + SHA512: {{ release.sha512.gz }} + +* <{{ release.url.xz }}> + + SIZE: {{ release.size.xz }} + SHA1: {{ release.sha1.xz }} + SHA256: {{ release.sha256.xz }} + SHA512: {{ release.sha512.xz }} + +* <{{ release.url.zip }}> + + SIZE: {{ release.size.zip }} + SHA1: {{ release.sha1.zip }} + SHA256: {{ release.sha256.zip }} + SHA512: {{ release.sha512.zip }} + +## リリースコメント + +Ruby 開発者の皆様、バグや脆弱性を報告してくれたユーザーの皆様のご協力により本リリースは行われています。 +皆様のご協力に感謝します。