From 303b646c3c48fc3179af954433d9fa797e70a3b9 Mon Sep 17 00:00:00 2001 From: Alan Guo Xiang Tan Date: Tue, 30 Apr 2024 08:30:31 +0800 Subject: [PATCH] DEV: Bump Ruby to 3.2.4 (#794) This commit updates Ruby to 3.2.4 which includes security fixes for the following CVEs: * CVE-2024-27282: Arbitrary memory address read vulnerability with Regex search * CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc * CVE-2024-27280: Buffer overread vulnerability in StringIO --- image/base/slim.Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/image/base/slim.Dockerfile b/image/base/slim.Dockerfile index 6568248..add971c 100644 --- a/image/base/slim.Dockerfile +++ b/image/base/slim.Dockerfile @@ -11,7 +11,7 @@ ENV PG_MAJOR=13 \ CARGO_HOME=/usr/local/cargo \ PATH=/usr/local/cargo/bin:$PATH \ LEFTHOOK=0 \ - RUBY_VERSION=3.2.3 \ + RUBY_VERSION=3.2.4 \ DEBIAN_RELEASE=${DEBIAN_RELEASE} #LABEL maintainer="Sam Saffron \"https://twitter.com/samsaffron\"" -- 2.25.1