UnratedFix available
Ruby 3.3.12 Released
Ruby 3.3.12 includes security fixes, including an ERB deserialization guard-bypass fix and security fixes in the updated net-imap gem.
Announced Group revision 1
Original source ↗ruby
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
Ruby 3.3.12 has been released. This release includes security fixes.
Ruby
Ruby 3.3.12 has been released.
- Affected versions
- Not stated in this extraction
- Fixed versions
- 3.3.12
Ruby 3.3.12 has been released.
- Prerequisites
- Not stated in this extraction
erb
This release updates the default gem erb to 4.0.3.1
- Affected versions
- Not stated in this extraction
- Fixed versions
- 4.0.3.1
This release updates the default gem erb to 4.0.3.1
- Prerequisites
- Not stated in this extraction
net-imap
the bundled gem net-imap to 0.4.25
- Affected versions
- Not stated in this extraction
- Fixed versions
- 0.4.25
the bundled gem net-imap to 0.4.25
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2026-41316
CVE-2026-41316: ERB @_init deserialization guard bypass via def_module / def_method / def_class
CVE-2026-42245The net-imap update fixes CVE-2026-42245
CVE-2026-42246CVE-2026-42245, CVE-2026-42246
CVE-2026-42256CVE-2026-42256
CVE-2026-42257CVE-2026-42257
CVE-2026-42258CVE-2026-42258
CVE-2026-47240CVE-2026-47240
CVE-2026-47241CVE-2026-47241
CVE-2026-47242CVE-2026-47242
Publisher severity
No explicit severity was extracted.
- Event
- #19322 · Revision 1
- Added to Heist Feed
- Publisher date