Skip to content
Heist/ feed
Back to feed
UnratedFix available

v4.1.0.beta2

Type: patchSources: RubyGems and Bundler

RubyGems 4.1.0.beta2 improves gem extraction by dropping setuid, setgid, and sticky bits, reducing the risk of unsafe permissions being preserved.

Products
RubyGems
Affected versions
Not specified
Fixed versions
4.1.0.beta2
CVEs
Not specified
Confirmed fixed CVEs
Not specified
Updated in this feed
30 Oct 2026, 06:31 UTC · Revision 1

Source evidence

v4.1.0.beta2

github-rubygems-rubygems · Original source

Published 8 Oct 2026, 04:26 UTC

RubyGems 4.1.0.beta2 improves gem extraction by dropping setuid, setgid, and sticky bits, reducing the risk of unsafe permissions being preserved.

Drop setuid, setgid and sticky bits when extracting gems.

RubyGems

Fixed versions: 4.1.0.beta2

Complete source record
{
  "id": "1d6defebf0238342491633f06a8dc54ec1853521190c978084897b5ab63e1c35",
  "url": "https://github.com/ruby/rubygems/releases/tag/v4.1.0.beta2",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "v4.1.0.beta2",
    "summary": "RubyGems 4.1.0.beta2 improves gem extraction by dropping setuid, setgid, and sticky bits, reducing the risk of unsafe permissions being preserved.",
    "evidence": "Drop setuid, setgid and sticky bits when extracting gems.",
    "products": [
      {
        "name": {
          "value": "RubyGems",
          "evidence": "RubyGems Changes"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "4.1.0.beta2",
            "evidence": "v4.1.0.beta2"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-rubygems-rubygems",
  "document_id": 22521,
  "published_at": "2026-10-08T04:26:20+00:00"
}