Ruby 4.0.4 Released

RubyPublished 2026-10-09 14:58 UTC

Ruby 4.0.4 has been released. This is a routine update that includes bugfixes. Please see the GitHub Releases for further details. Release Schedule We intend to release the latest stable Ruby version (currently Ruby 4.0) every two months following the most recent regular release. Ruby 4.0.5 will be released in July, 4.0.6 in September, and 4.0.7 in November. If a change arises that significantly…

— Ruby

Read at Ruby

Release

Version: 4.0.4
Released: 2026-05-11
Release notes: Ruby

Ruby 4.0.5 Released

RubyRuby 4.0.5 has been released. This release only contains a security fix for CVE-2026-46727: Use-after-free in pthread-based getaddrinfo timeout handler and a build system regression in Ruby 4.0.4 under C locale [Bug #22065]. Please see the GitHub releases for further details.…

May 20

Security advisories: CVE-2026-80212 and CVE-2026-80213
RubyTwo vulnerabilities have been discovered in the resolv gem bundled with Ruby. They have been assigned the CVE identifiers CVE-2026-80212 and CVE-2026-80213. We recommend upgrading the resolv gem. CVE-2026-80212: Memory exhaustion through malicious DNS responses An application…
Aug 27
CVE-2026-46727: Use-after-free in pthread-based getaddrinfo timeout handler
RubyA use-after-free vulnerability has been discovered in the pthread-based getaddrinfo timeout handler of Ruby. This vulnerability has been assigned the CVE identifier CVE-2026-46727. This issue has been fixed in Ruby 4.0.5. We recommend upgrading Ruby. Details A race condition…
May 20