TechnologyFriday, October 23, 20261 min read

Ruby 3.4.12 Released

By Engineering Blogs · Published by Everything Blog

In short

Ruby 3.4.12 has been released, addressing critical bugs in Regexp compilation related to GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229, and CVE-2026-110264. This update includes additional bug fixes and can be downloaded from the official Ruby website.

Key points

Ruby 3.4.12 addresses critical bugs in Regexp compilation.: Ruby 3.4.12 addresses critical bugs in Regexp compilation.
This release includes fixes for GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229,…: This release includes fixes for GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229, and CVE-2026-110264.
The update includes additional bug fixes for enhanced security and functionality.: The update includes additional bug fixes for enhanced security and functionality.

Sources checked by our analysis pipeline: 1

Posted by nagachika on 23 Oct 2026

Ruby 3.4.12 has been released.

This release includes fixes for bugs in Regexp compilation that GitLab’s CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264 rely on. Please see the topic below for details.

This release also includes other bugfixes. Please see the GitHub releases for further details.

Download

https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.12.tar.gz

SIZE: 22498017 SHA1: 8ead0b008d7cdeb543282489e7574324ab62939f SHA256: 5e5d85ad93b0adcccbad47733680f4892bd0078e3342437f7babce01c1872479 SHA512: 7d4fcf4b57f94974091df406e159ccfd8460e75bd7593993d9d4172a8ad673388bb8505ddb41377014dce4df6d358e019d4fa4098b535aa705e790f65962f1cd

https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.12.tar.xz

SIZE: 16732860 SHA1: bf42a4909e1517a2fee26eebbd840bbef3181c61 SHA256: db6c147940d7ad0b706823d42c8e6713c36dec70a1f83f635f1d3a7f0599ec90 SHA512: 7866ed652921f9f0d601e1e323d29fddee3506cfd89e258cab7601786bffec8a17245468d517d246ecfa7fa9a982b73cfff0aaf6534444753e8b6add297bfbd3

https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.12.zip

SIZE: 27719665 SHA1: c4381ce52fba1af02944cedb35eac569976bfdb8 SHA256: b1bec4f3a2b0c47f349a102b013f1c8f345b9991388e75368d1178ac4f9cfc0e SHA512: 21573c2ba656984c006c8f499f3498c5208eba17d862d93269221c1e7295ace4e5034a53b23931d6b9585c4fc98ecd9b1196b81c2b58543d83550ea60fdc014e

Release Comment

Many committers, developers, and users who provided bug reports helped us make this release. Thanks for their contributions.

Recent News

Ruby 3.3.13 Released

Ruby 3.3.13 has been released.

Posted by hsbt on 23 Oct 2026

Ruby 4.0.9 Released

Ruby 4.0.9 has been released.

Posted by k0kubun on 23 Oct 2026

Regexp compilation fixes related to GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264

We have released Ruby 4.0.9, 3.4.12 and 3.3.13. They fix several bugs in Ruby’s regular expression engine (Onigmo) that GitLab found could be used for...

Posted by k0kubun on 23 Oct 2026

Ruby 4.0.8 Released

Ruby 4.0.8 has been released.

Posted by k0kubun on 22 Oct 2026

Original source: www.ruby-lang.org

AI Analysis

Tone

Neutral

In short

Key Points

Ruby 3.4.12 addresses critical bugs in Regexp compilation.: Ruby 3.4.12 addresses critical bugs in Regexp compilation.
This release includes fixes for GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229,…: This release includes fixes for GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229, and CVE-2026-110264.
The update includes additional bug fixes for enhanced security and functionality.: The update includes additional bug fixes for enhanced security and functionality.

Topics

Technology

Was this summary useful?

AI Analysis

Tone

Neutral

In short

Key Points

Ruby 3.4.12 addresses critical bugs in Regexp compilation.: Ruby 3.4.12 addresses critical bugs in Regexp compilation.
This release includes fixes for GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229,…: This release includes fixes for GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229, and CVE-2026-110264.
The update includes additional bug fixes for enhanced security and functionality.: The update includes additional bug fixes for enhanced security and functionality.

Topics

Technology

Was this summary useful?

China TBM curbs: India building its own machines
China has curbed the construction of TBM machines, highlighting the engineering challenges involved in the Rishikesh-Karnaprayag railway project. The 125-km line is being built through difficult Himalayan terrain and is expected to improve connectivity to several parts of Uttarakhand. The project includes 16 tunnels and 19 bridges, with around 104 km of the alignment passing through tunnels. The minister described the route as a demanding engineering undertaking shaped by the region's geological conditions. The pr…
4 min read
Amazon abandons data centres plan it paid $427 mn for; donates $5 mn for housing
Amazon has abandoned its Virginia data center expansion plan, donating 25 acres to Loudoun County for community facilities and $5 million to affordable housing, aligning with its commitment to community development and mixed-use development goals.
2 min read
China’s 'eyes in the sky' multiply, India’s surveillance fleet faces a numbers game
China's "eyes in the sky" fleet is expanding, with four KJ-3000 Airborne Early Warning and Control (AEW&C) aircraft located at the Xi'an Aircraft Company. This indicates that serial production of the aircraft is imminent, enhancing China's AEW&C capabilities. The KJ-3000, based on the Y-20B transport aircraft, is designed to address existing limitations in China's AEW&C fleet. In contrast, India's airborne early warning capability remains limited with fewer aircraft currently in service. New satellite imagery show…
1 min read

Ruby 3.4.12 Released

In short

Key points

More in Technology