Ruby: v3_2_2 Release

Security Fixes

• CVE-2023-28755: ReDoS vulnerability in URI
• CVE-2023-28756: ReDoS vulnerability in Time

What's Changed

• Backport [Bug #19158] for Ruby 3.2 by hsbt · Pull Request #7356
• Bug #19415: Incorrect circularity warning for concurrent requires
• Bug #19400: YJIT fails to boot on ARM64 systems with 64 KiB pages
• Bug #19419: [BUG] try to mark T_NONE object in ibf_dump_mark
• Bug #19444: YJIT String#+@ miscompilations
• Bug #19445: Segmentation fault with Numeric#step
• Bug #19439: Marshal.load doesn't load Regexp instance variables
• Bug #19459: Is length of IO::Buffer#read required or optional?
• Bug #19464: YJIT miscompiles BasicObject#__send__ to alias methods of send
• Bug #19468: Ruby 3.2: net/http sets UTF-8 encoding for binary responses
• Bug #19469: Crash when resizing generic iv list
• Bug #19161: Cannot compile 3.0.5 or 3.1.3 on Red Hat Enterprise Linux 7
• Bug #19467: Some linear_time regexp does not match in linear time
• Bug #19476: Regexp unexpected partial match
• Bug #19536: Frozen status loss when moving objects
• Bug #19485: Unexpected behavior in squiggly heredocs
• Bug #19471: Regexp::compile does not handle :timeout argument
• Use URI-0.12.1 for Ruby 3.2 by hsbt · Pull Request #7603
• Merge RubyGems-3.4.10 and Bundler-2.4.10 by hsbt · Pull Request #7479
• Merge Time-0.2.2 by hsbt · Pull Request #7623

Note: This list is automatically generated by tool/gen-github-release.rb. Because of this, some commits may be missing.

Full Changelog

https://github.com/ruby/ruby/compare/v3_2_1...v3_2_2