Skip to content
Heist/ feed
UnratedFix available

Ruby 4.0.9 Released

Type: patchSource: Ruby1 source record

Ruby 4.0.9 includes fixes for bugs in the regular expression engine that could be used for security issues. Ruby 3.4.12 and 3.3.13 were also released with fixes.

Announced Source revision 1
Original source ↗

ruby

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

Ruby 4.0.9 has been released. This release includes a fix for a bug in Regexp compilation

Ruby

Ruby 4.0.9 has been released.
Affected versions
Not stated in this extraction
Fixed versions
4.0.9
Ruby 4.0.9 has been released.
3.4.12
We have released Ruby 4.0.9, 3.4.12 and 3.3.13.
3.3.13
We have released Ruby 4.0.9, 3.4.12 and 3.3.13.
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2026-89078
Regexp compilation fixes related to GitLab’s CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264
CVE-2026-93577
Regexp compilation fixes related to GitLab’s CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264
CVE-2026-97229
Regexp compilation fixes related to GitLab’s CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264
CVE-2026-110264
Regexp compilation fixes related to GitLab’s CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264

Publisher severity

No explicit severity was extracted.

Event
#19317 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement