Ruby 3.0.4 Released

[an...@arko.net]

Ruby 3.0.4 has been released.

This release includes security fixes. Please check the topics below for details.

• CVE-2022-28738: Double free in Regexp compilation
• CVE-2022-28739: Buffer overrun in String-to-Float conversion

See the commit logs for further details.

Download

• https://cache.ruby-lang.org/pub/ruby/3.0/ruby-3.0.4.tar.gz

  SIZE: 21139486
  SHA1: 9c995a7a5cc3300ea1adb734017545e19d0af3ca
  SHA256: 70b47c207af04bce9acea262308fb42893d3e244f39a4abc586920a1c723722b
  SHA512: 0dfded6826063c1b39bf625a6e13b46c109cb160c8648b78f0965f70e7c7a1a65f1c117fc8f2cf8bdb34d7cbf79fecf1f45d169d2323406d66ab27b18bde1d22
  

• https://cache.ruby-lang.org/pub/ruby/3.0/ruby-3.0.4.tar.xz

  SIZE: 15830368
  SHA1: 14461adca874d42a06a11851029dec877d9d28de
  SHA256: 8e22fc7304520435522253210ed0aa9a50545f8f13c959fe01a05aea06bef2f0
  SHA512: 53bf7dd403b0c68af9691882ad8ed7422c8d1f496627428fb4c3caf0b0313715524b744c5f453aced2d49e16e55f3f45b46b9a77aa3097dbfcae7caa0208194b
  

• https://cache.ruby-lang.org/pub/ruby/3.0/ruby-3.0.4.zip

  SIZE: 25517085
  SHA1: 6700ef07e3f7c4582d1b8004bfcce6cb4075b951
  SHA256: d4ce9fd565a81ce138ea26382c8880f0456883b2539e18510e1d845293a095cb
  SHA512: 2d97099161bcd17c5fdf1c70da6e062ae410186e7c1235e3b1df5bad6085e370bed3cf1ebd89ed9b5918cd386ae47d1f986a3c96c32f0c8a0b9375e56b66a1d9
  

Release Comment

Many committers, developers, and users who provided bug reports helped us make this release. Thanks for their contributions.

Posted by nagachika and mame on 12 Apr 2022

https://www.ruby-lang.org/en/news/2022/04/12/ruby-3-0-4-released/