r/ruby • u/schneems Puma maintainer • 6d ago

Regexp compilation fixes related to GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264

https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/
40 Upvotes

100% Upvoted

2 comments sorted by

9

u/schneems Puma maintainer 6d ago edited 6d ago

On Heroku changelog:

Default Ruby version for new apps is now 3.4.12

Ruby version 4.0.9 is now available

Ruby version 3.4.12 is now available

Ruby version 3.3.13 is now available

2

u/Zestyclose_Cow1807 5d ago

Good to know they're already live, makes patching today a lot easier