Security
Security
A vulnerability has been discovered in Ruby, possibly allowing remote code execution.
| Package | dev-lang/ruby on all architectures |
|---|---|
| Affected versions | < 3.3.12 < 3.4.10 < 4.0.6 |
| Unaffected versions | >= 3.3.12 >= 3.4.10 >= 4.0.6 |
| Package | dev-ruby/erb on all architectures |
|---|---|
| Affected versions | < 6.0.6 |
| Unaffected versions | >= 6.0.6 |
Ruby is an interpreted scripting language for quick and easy object-oriented programming.
A vulnerability has been discovered in Ruby. Please review the CVE identifier referenced below for details.
Remote code execution is possible.
There is no known workaround at this time.
All Ruby 3.3 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/ruby-3.3.12:3.3"
All Ruby 3.4 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/ruby-3.4.10:3.4"
All Ruby 4.0 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/ruby-4.0.6:4.0"
All ERB users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-ruby/erb-6.0.6:6"
Release date
September 12, 2026
Latest revision
September 12, 2026: 1
Severity
high
Exploitable
remote
Bugzilla entries