nixpkgs/pkgs/development/interpreters/ruby/rubygems-src.nix

{ fetchurl
, version ? "2.6.13"
, sha256 ? "1j98ww8cz9y4wwshg7p4i4acrmls3ywkyj1nlkh4k3bywwm50hfh"
}:
fetchurl {
  url = "http://production.cf.rubygems.org/rubygems/rubygems-${version}.tgz";
  sha256 = sha256;
}
ruby: install rubygems directly into the derivation Having a separate rubygems package can lead to split-brain scenarios. Since rubygems is designed to replace himself on a ruby installation, let's do that. 2016-03-02 10:05:01 +00:00			`{ fetchurl`
rubygems: 2.6.10 -> 2.6.13 Fixes a number of CVEs: - a DNS request hijacking vulnerability. (CVE-2017-0902) - an ANSI escape sequence vulnerability. (CVE-2017-0899) - a DoS vulnerability in the query command. (CVE-2017-0900) - a vulnerability in the gem installer that allowed a malicious gem to overwrite arbitrary files. (CVE-2017-0901) 2017-09-08 04:07:55 +00:00			`, version ? "2.6.13"`
			`, sha256 ? "1j98ww8cz9y4wwshg7p4i4acrmls3ywkyj1nlkh4k3bywwm50hfh"`
ruby: install rubygems directly into the derivation Having a separate rubygems package can lead to split-brain scenarios. Since rubygems is designed to replace himself on a ruby installation, let's do that. 2016-03-02 10:05:01 +00:00			`}:`
			`fetchurl {`
			`url = "http://production.cf.rubygems.org/rubygems/rubygems-${version}.tgz";`
			`sha256 = sha256;`
			`}`