These are the latest releases of Ruby 4.0 and 3.4. The 4.0.9 release is the same as the 4.0.8 release with security fixes for CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264. Ruby 3.4.12 has the same security fixes. Note that these fixes protect against cases where untrusted input is used to create Regexp objects, which is just asking for trouble IMO.
Release announcements: 4.0.9: https://www.ruby-lang.org/en/news/2026/10/23/ruby-4-0-9-released/ 3.4.12: https://www.ruby-lang.org/en/news/2026/10/23/ruby-3-4-12-released/ Ruby 3.3.13 was also released today, but since it was just sent to the Attic, no patch for it. Tested on amd64. Will be committing in a couple days unless I hear objections. Best, Jeremy Index: 3.4/Makefile =================================================================== RCS file: /cvs/ports/lang/ruby/3.4/Makefile,v retrieving revision 1.16 diff -u -p -u -p -r1.16 Makefile --- 3.4/Makefile 26 Sep 2026 00:07:11 -0000 1.16 +++ 3.4/Makefile 23 Oct 2026 05:29:24 -0000 @@ -1,4 +1,4 @@ -VERSION = 3.4.11 +VERSION = 3.4.12 DISTNAME = ruby-${VERSION} PKGNAME-main = ruby-${VERSION} PKGNAME-ri_docs = ruby${BINREV}-ri_docs-${VERSION} Index: 3.4/distinfo =================================================================== RCS file: /cvs/ports/lang/ruby/3.4/distinfo,v retrieving revision 1.11 diff -u -p -u -p -r1.11 distinfo --- 3.4/distinfo 26 Sep 2026 00:07:11 -0000 1.11 +++ 3.4/distinfo 23 Oct 2026 05:29:24 -0000 @@ -1,2 +1,2 @@ -SHA256 (ruby-3.4.11.tar.gz) = XCK+RFJDErPUM9aHObzFMGM7HaXvi6CvoKN2gNoX094= -SIZE (ruby-3.4.11.tar.gz) = 22492449 +SHA256 (ruby-3.4.12.tar.gz) = Xl2FrZOwrczLrUdzNoD0iSvQB44zQkN/e6vOAcGHJHk= +SIZE (ruby-3.4.12.tar.gz) = 22498017 Index: 4.0/Makefile =================================================================== RCS file: /cvs/ports/lang/ruby/4.0/Makefile,v retrieving revision 1.13 diff -u -p -u -p -r1.13 Makefile --- 4.0/Makefile 19 Sep 2026 00:06:58 -0000 1.13 +++ 4.0/Makefile 23 Oct 2026 05:29:24 -0000 @@ -1,4 +1,4 @@ -VERSION = 4.0.7 +VERSION = 4.0.9 DISTNAME = ruby-${VERSION} PKGNAME-main = ruby-${VERSION} PKGNAME-ri_docs = ruby${BINREV}-ri_docs-${VERSION} Index: 4.0/distinfo =================================================================== RCS file: /cvs/ports/lang/ruby/4.0/distinfo,v retrieving revision 1.8 diff -u -p -u -p -r1.8 distinfo --- 4.0/distinfo 19 Sep 2026 00:06:58 -0000 1.8 +++ 4.0/distinfo 23 Oct 2026 05:29:24 -0000 @@ -1,2 +1,2 @@ -SHA256 (ruby-4.0.7.tar.gz) = kRrOIPkNBoyg5N2m0OTw+B5S5S8t1PQATHIeJTQS6C0= -SIZE (ruby-4.0.7.tar.gz) = 23937964 +SHA256 (ruby-4.0.9.tar.gz) = w1NQaC/wULeXAtV63kUW5zNgY/UQFV0Z+y+1s/OQlRE= +SIZE (ruby-4.0.9.tar.gz) = 23946524 Index: 4.0/patches/patch-common_mk =================================================================== RCS file: /cvs/ports/lang/ruby/4.0/patches/patch-common_mk,v retrieving revision 1.1.1.1 diff -u -p -u -p -r1.1.1.1 patch-common_mk --- 4.0/patches/patch-common_mk 27 Dec 2025 16:25:13 -0000 1.1.1.1 +++ 4.0/patches/patch-common_mk 23 Oct 2026 05:29:24 -0000 @@ -14,7 +14,7 @@ Index: common.mk V0 = $(V:0=) Q1 = $(V:1=) Q = $(Q1:0=@) -@@ -591,7 +591,7 @@ dont-install-man: $(PREP) +@@ -592,7 +592,7 @@ dont-install-man: $(PREP) post-no-install-man:: @$(NULLCMD) Index: 4.0/pkg/PLIST-main =================================================================== RCS file: /cvs/ports/lang/ruby/4.0/pkg/PLIST-main,v retrieving revision 1.8 diff -u -p -u -p -r1.8 PLIST-main --- 4.0/pkg/PLIST-main 19 Sep 2026 00:06:58 -0000 1.8 +++ 4.0/pkg/PLIST-main 23 Oct 2026 05:29:24 -0000 @@ -2029,7 +2029,7 @@ lib/ruby/gems/${REV}/gems/prime-0.1.4/si lib/ruby/gems/${REV}/gems/prime-0.1.4/sig/integer-extension.rbs lib/ruby/gems/${REV}/gems/prime-0.1.4/sig/manifest.yaml lib/ruby/gems/${REV}/gems/prime-0.1.4/sig/prime.rbs -lib/ruby/gems/${REV}/gems/prism-1.8.1/ +lib/ruby/gems/${REV}/gems/prism-1.8.2/ lib/ruby/gems/${REV}/gems/pstore-0.2.1/ lib/ruby/gems/${REV}/gems/pstore-0.2.1/BSDL lib/ruby/gems/${REV}/gems/pstore-0.2.1/COPYING @@ -3495,7 +3495,7 @@ lib/ruby/gems/${REV}/specifications/defa lib/ruby/gems/${REV}/specifications/default/optparse-0.8.1.gemspec lib/ruby/gems/${REV}/specifications/default/pp-0.6.3.gemspec lib/ruby/gems/${REV}/specifications/default/prettyprint-0.2.0.gemspec -lib/ruby/gems/${REV}/specifications/default/prism-1.8.1.gemspec +lib/ruby/gems/${REV}/specifications/default/prism-1.8.2.gemspec lib/ruby/gems/${REV}/specifications/default/psych-5.3.1.gemspec lib/ruby/gems/${REV}/specifications/default/resolv-0.7.2.gemspec lib/ruby/gems/${REV}/specifications/default/ruby2_keywords-0.0.5.gemspec
