May 2026 Archives

Ruby 4.0.5 Released

Ruby 4.0.5 has been released.

Posted by k0kubun on 20 May 2026

CVE-2026-46727: Use-after-free in pthread-based getaddrinfo timeout handler

A use-after-free vulnerability has been discovered in the pthread-based getaddrinfo timeout handler of Ruby. This vulnerability has been assigned the CVE identifier CVE-2026-46727. This issue has been fixed in Ruby 4.0.5. We recommend upgrading Ruby.

Posted by hsbt on 20 May 2026

Ruby 4.0.4 Released

Ruby 4.0.4 has been released.