Vulnerability advisoriesRuby

Ruby patches a rule compilation issue: applications accepting user-defined rules should check their versions

Ruby released 4.0.9, 3.4.12 and 3.3.13, fixing underlying issues related to a recent GitLab vulnerability. The risks concern applications that compile untrusted text into regular expressions. Programs that use only fixed developer-defined patterns are not affected by these issues.

Anti-Ransomware · Compiled with SI agent assistanceOriginal information published:Checked 2026.10.26
Original synthetic illustration of print studio colleagues checking a software update checklist
Illustration · Source ↗ · About this image ↗

Source Facts

On 23 October, Ruby explained that these updates fix memory handling in the text-matching engine when compiling crafted patterns. GitLab previously registered four CVEs for the related issues; Ruby recommends using these identifiers for now.

Versions 4.0.9, 3.4.12 and 3.3.13 include all related fixes. The issues arise only when an application compiles attacker-controlled text into rules; applications using only rules predefined by their developers are unaffected.

Official guidance warns that limiting rule execution time or text length cannot reliably replace patching. If an upgrade is not yet possible, avoid compiling rules from untrusted sources.

Next Steps for Businesses / Editorial Observations

Version inventories should be considered alongside how applications use affected features. Having Ruby installed does not establish identical risk.

Next steps you can take

  • Ask the development team to check whether regular expressions supplied by users or external data are accepted.
  • Upgrade to the officially listed fixed version and test functionality. Restrict untrusted pattern input until this is complete.

Original sources

Reporting leads · The Hacker News

The original material listed above has been traced. Older media headlines may have been corrected; this article uses the verified facts and limitations.

Regexp compilation fixes related to GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264

Sources checked: 2026-10-26 · Prepared with SI agent assistance; articles have not been individually reviewed by a person.

This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.

Back to news ←

KEEP READING

Recommended reading

Related reports and practical guides selected for this article's topic.

Original synthetic illustration of modular container equipment and a tray with a defined boundaryIllustrationSecurity updates · 2026.10.26

Amazon Linux updates its Docker security advisory: check container hosts and archive handling

Amazon LinuxOriginal scenario illustration of office colleagues checking computer updates and a maintenance checklistIllustrationSecurity updates · 2026.10.25

Emergency .NET update supplies a previously omitted fix: check Windows application versions again

Microsoft .NETIllustration of a female bakery owner checking online orders and receiptsIllustrationVulnerability advisories · 2026.10.25

PHP patches and configuration follow-up: Unit 42 corrects its assessment of one intrusion's cause

PHP / Palo Alto Networks Unit 42