Ruby 3.0.4 Released

Posted by nagachika and mame on 12 Apr 2022

Ruby 3.0.4 has been released.

This release includes security fixes. Please check the topics below for details.

• CVE-2022-28738: Double free in Regexp compilation
• CVE-2022-28739: Buffer overrun in String-to-Float conversion

See the commit logs for further details.

Download

• https://cache.ruby-lang.org/pub/ruby/3.0/ruby-3.0.4.tar.gz

  SIZE: 21139486
  SHA1: 9c995a7a5cc3300ea1adb734017545e19d0af3ca
  SHA256: 70b47c207af04bce9acea262308fb42893d3e244f39a4abc586920a1c723722b
  SHA512: 0dfded6826063c1b39bf625a6e13b46c109cb160c8648b78f0965f70e7c7a1a65f1c117fc8f2cf8bdb34d7cbf79fecf1f45d169d2323406d66ab27b18bde1d22
  

• https://cache.ruby-lang.org/pub/ruby/3.0/ruby-3.0.4.tar.xz

  SIZE: 15830368
  SHA1: 14461adca874d42a06a11851029dec877d9d28de
  SHA256: 8e22fc7304520435522253210ed0aa9a50545f8f13c959fe01a05aea06bef2f0
  SHA512: 53bf7dd403b0c68af9691882ad8ed7422c8d1f496627428fb4c3caf0b0313715524b744c5f453aced2d49e16e55f3f45b46b9a77aa3097dbfcae7caa0208194b
  

• https://cache.ruby-lang.org/pub/ruby/3.0/ruby-3.0.4.zip

  SIZE: 25517085
  SHA1: 6700ef07e3f7c4582d1b8004bfcce6cb4075b951
  SHA256: d4ce9fd565a81ce138ea26382c8880f0456883b2539e18510e1d845293a095cb
  SHA512: 2d97099161bcd17c5fdf1c70da6e062ae410186e7c1235e3b1df5bad6085e370bed3cf1ebd89ed9b5918cd386ae47d1f986a3c96c32f0c8a0b9375e56b66a1d9
  

Release Comment

Many committers, developers, and users who provided bug reports helped us make this release. Thanks for their contributions.