Re: [BLFS Trac] #23181: ruby-4.0.3

"BLFS Trac" ([email protected] via blfs-book Mailing List) <[email protected]> Wed, 22 Apr 2026 19:09:28 -0000

Newsgroups	gmane.linux.lfs.beyond.book
Message-ID	<[email protected]>

#23181: ruby-4.0.3
-------------------------+-------------------------------
 Reporter:  Bruce Dubbs  |       Owner:  SecurityAdvisory
     Type:  enhancement  |      Status:  new
 Priority:  elevated     |   Milestone:  13.1
Component:  BOOK         |     Version:  git
 Severity:  normal       |  Resolution:
 Keywords:               |
-------------------------+-------------------------------
Changes (by Joe Locash):

 * owner:  Joe Locash => SecurityAdvisory
 * priority:  normal => elevated
 * status:  assigned => new

Comment:

 {{{
 4.0.3

 What's Changed
   - Prohibit def_method on marshal-loaded ERB instances (CVE-2026-41316)
 }}}
 Full Changelog: [https://github.com/ruby/ruby/compare/v4.0.2...v4.0.3
 v4.0.2...v4.0.3]

 Fixed at 53a7f876c7. Leaving open for SA.
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23181#comment:2>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page