Bug #19556: Backport latest versions of URI

• Status: Closed
• Assignee: -
• Target version: -
• Backport: 2.7: DONE, 3.0: DONE, 3.1: DONE, 3.2: DONE

[hsbt (Hiroshi SHIBATA)]

https://www.ruby-lang.org/en/news/2023/03/28/redos-in-uri-cve-2023-28755/ has been published. We should upgrade URI version each stable branch.

• for Ruby 3.0
• for Ruby 3.1

[nagachika (Tomoyuki Chikanaga)]

• Backport changed from 2.7: DONE, 3.0: REQUIRED, 3.1: REQUIRED, 3.2: DONE to 2.7: DONE, 3.0: REQUIRED, 3.1: DONE, 3.2: DONE

merged pull request for ruby_3_1 at 66ad6e533e968cb6a8f54674b1c3a3fd0a316893.

[hsbt (Hiroshi SHIBATA)]

• Backport changed from 2.7: DONE, 3.0: REQUIRED, 3.1: DONE, 3.2: DONE to 2.7: DONE, 3.0: DONE, 3.1: DONE, 3.2: DONE