Ruby 4.0.9 has been released.

This release includes a fix for a bug in Regexp compilation that GitLab's CVE-2026-110264 relies on.
Please see the topic below for details.

* [Regexp compilation fixes related to GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264](/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/)

Please see the [GitHub releases](https://github.com/ruby/ruby/releases/tag/v4.0.9) for further details.

## Download



* <https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.9.tar.gz>

      SIZE: 23946524
      SHA1: 39f31360bc0c03bde9eec4177e443f6298481e2e
      SHA256: c35350682ff050b79702d57ade4516e7336063f510155d19fb2fb5b3f3909511
      SHA512: 9adb0069a07ee1348a04b627d8af1c9f2b6537bdea5dce0b57423659626d9ae3cc04955eae7167014c56bd0f4c7c9d1aa0e4fcfc666eda738b1b0c35a3674114

* <https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.9.tar.xz>

      SIZE: 17996144
      SHA1: 630cf1e7a4c522f49a2fec383805627691500b54
      SHA256: a8057adb39f51ad6dc3106237504c93dd792bb515837b4fe7817ae21ed7e51f4
      SHA512: 7160b1c6fb61b0e369cddccb29eadae85390d86777c875efc18a56de390b1fe1ff47d6e37ccaf39d2ed477c9811f1224cbb3d2f54a0cbd5d5daf418b1cf2557e

* <https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.9.zip>

      SIZE: 29263242
      SHA1: 9e2d496d0f3663918c3183b8671c7f4b78aa185e
      SHA256: 8242fbb2354cb71811cb2ff4d5e149b7a0ecb700e6c61a897710204ac36f866b
      SHA512: 29422739ea9b5189c24354f6c689f40485c4dc8945e735c38240094195a637dbc6807f4fe295a1579b27ca930e1eb6b2ad7fe1970dad38d0800e049863e8288b

## Release Comment

Many committers, developers, and users who provided bug reports helped us make this release.
Thanks for their contributions.