UnratedFix available
v4.1.0.beta2
Type: patchSources: RubyGems and Bundler
RubyGems 4.1.0.beta2 improves gem extraction by dropping setuid, setgid, and sticky bits, reducing the risk of unsafe permissions being preserved.
- Products
- RubyGems
- Affected versions
- Not specified
- Fixed versions
- 4.1.0.beta2
- CVEs
- Not specified
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 06:31 UTC · Revision 1
Source evidence
RubyGems 4.1.0.beta2 improves gem extraction by dropping setuid, setgid, and sticky bits, reducing the risk of unsafe permissions being preserved.
Drop setuid, setgid and sticky bits when extracting gems.
RubyGems
Fixed versions: 4.1.0.beta2
Complete source record
{
"id": "1d6defebf0238342491633f06a8dc54ec1853521190c978084897b5ab63e1c35",
"url": "https://github.com/ruby/rubygems/releases/tag/v4.1.0.beta2",
"method": "llm",
"payload": {
"kind": "patch",
"title": "v4.1.0.beta2",
"summary": "RubyGems 4.1.0.beta2 improves gem extraction by dropping setuid, setgid, and sticky bits, reducing the risk of unsafe permissions being preserved.",
"evidence": "Drop setuid, setgid and sticky bits when extracting gems.",
"products": [
{
"name": {
"value": "RubyGems",
"evidence": "RubyGems Changes"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.1.0.beta2",
"evidence": "v4.1.0.beta2"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "github-rubygems-rubygems",
"document_id": 22521,
"published_at": "2026-10-08T04:26:20+00:00"
}