From 309779d250d2e18e31a21789f349425aa4e3e808 Mon Sep 17 00:00:00 2001 From: GitHub Actions Bot Date: Thu, 16 Jul 2026 05:08:13 +0000 Subject: [PATCH 1/2] Create release for 3.3.12 --- _data/downloads.yml | 2 +- _data/releases.yml | 24 +++++++++++ .../_posts/2026-07-16-ruby-3-3-12-released.md | 42 +++++++++++++++++++ 3 files changed, 67 insertions(+), 1 deletion(-) create mode 100644 en/news/_posts/2026-07-16-ruby-3-3-12-released.md diff --git a/_data/downloads.yml b/_data/downloads.yml index 56108ce3fd..5df0eb462e 100644 --- a/_data/downloads.yml +++ b/_data/downloads.yml @@ -9,7 +9,7 @@ stable: - 4.0.6 - 3.4.10 - - 3.3.11 + - 3.3.12 - 3.2.11 # optional diff --git a/_data/releases.yml b/_data/releases.yml index 297ee78e4b..f1c1c9ef53 100644 --- a/_data/releases.yml +++ b/_data/releases.yml @@ -643,6 +643,30 @@ # 3.3 series +- version: 3.3.12 + date: 2026-07-16 + post: /en/news/2026/07/16/ruby-3-3-12-released/ + url: + gz: https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.12.tar.gz + zip: https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.12.zip + xz: https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.12.tar.xz + size: + gz: 21489887 + zip: 26954647 + xz: 15891224 + sha1: + gz: 1ecad817a7d3727db65cf898a51d9956888cee5b + zip: 8be5a3c6f4a8821ce5326a9e09d4230c9fa06faa + xz: 7df70ae8a9feb880e2ad5054dfebd712ba03d0eb + sha256: + gz: b06d63beae271933033e27f0a389bc582a009e7845357d44365c39de525a051b + zip: fc1aecfb45adeb7bebbf9549d45ce6e57f0c9dac8b83cdeb80680de02a83ce41 + xz: 873e3297990b8cff7a5436f6e510a3a7a18c74e5f2c794e4162e605fe0a743b3 + sha512: + gz: 7c620438e85beb6744acc7d1e917af554238739883d592aa9839fca78514c11e91dfd8c4b5ce611d1ea507a4412ed81f3a8b5fc6eb07ba3e392a77b518de6829 + zip: ff5a0339310c464b88a444871f901f41fc735f77668b29dfc70389aae5d44fd90b55cff6c02d47a23596663525b526a86f9906c08c371d37e3fb105ea9c6b1a9 + xz: 1755901f5d1e66250e4f9f4e3a0bf31ec25055f1cb86fafc68281f6d108e9cf5329a6c74c221b1a31aa7de78e9c2d8aa7b76faf39acfce44c5ed94cf7e766f3f + - version: 3.3.11 date: 2026-03-26 post: "/en/news/2026/03/26/ruby-3-3-11-released/" diff --git a/en/news/_posts/2026-07-16-ruby-3-3-12-released.md b/en/news/_posts/2026-07-16-ruby-3-3-12-released.md new file mode 100644 index 0000000000..cb32d4c0fe --- /dev/null +++ b/en/news/_posts/2026-07-16-ruby-3-3-12-released.md @@ -0,0 +1,42 @@ +--- +layout: news_post +title: "Ruby 3.3.12 Released" +author: +translator: +date: 2026-07-16 05:08:11 +0000 +lang: en +--- + +Ruby 3.3.12 has been released. + +Please see the [GitHub releases](https://github.com/ruby/ruby/releases/tag/v3_3_12) for further details. + +## Download + +{% assign release = site.data.releases | where: "version", "3.3.12" | first %} + +* <{{ release.url.gz }}> + + SIZE: {{ release.size.gz }} + SHA1: {{ release.sha1.gz }} + SHA256: {{ release.sha256.gz }} + SHA512: {{ release.sha512.gz }} + +* <{{ release.url.xz }}> + + SIZE: {{ release.size.xz }} + SHA1: {{ release.sha1.xz }} + SHA256: {{ release.sha256.xz }} + SHA512: {{ release.sha512.xz }} + +* <{{ release.url.zip }}> + + SIZE: {{ release.size.zip }} + SHA1: {{ release.sha1.zip }} + SHA256: {{ release.sha256.zip }} + SHA512: {{ release.sha512.zip }} + +## Release Comment + +Many committers, developers, and users who provided bug reports helped us make this release. +Thanks for their contributions. From 9d0470307b6b7ed894bfac77bd51bff5dc336633 Mon Sep 17 00:00:00 2001 From: Hiroshi SHIBATA Date: Thu, 16 Jul 2026 14:33:29 +0900 Subject: [PATCH 2/2] Add security fixes information for Ruby 3.3.12 release post Ruby 3.3.12 updates erb to 4.0.3.1 (CVE-2026-41316) and net-imap to 0.4.25 (CVE-2026-42245, CVE-2026-42246, CVE-2026-42256, CVE-2026-42257, CVE-2026-42258, CVE-2026-47240, CVE-2026-47241, CVE-2026-47242). Also add the Japanese translation of the release post. Co-Authored-By: Claude Fable 5 --- .../_posts/2026-07-16-ruby-3-3-12-released.md | 9 +++- .../_posts/2026-07-16-ruby-3-3-12-released.md | 48 +++++++++++++++++++ 2 files changed, 56 insertions(+), 1 deletion(-) create mode 100644 ja/news/_posts/2026-07-16-ruby-3-3-12-released.md diff --git a/en/news/_posts/2026-07-16-ruby-3-3-12-released.md b/en/news/_posts/2026-07-16-ruby-3-3-12-released.md index cb32d4c0fe..ad6a0c0829 100644 --- a/en/news/_posts/2026-07-16-ruby-3-3-12-released.md +++ b/en/news/_posts/2026-07-16-ruby-3-3-12-released.md @@ -1,7 +1,7 @@ --- layout: news_post title: "Ruby 3.3.12 Released" -author: +author: hsbt translator: date: 2026-07-16 05:08:11 +0000 lang: en @@ -9,6 +9,13 @@ lang: en Ruby 3.3.12 has been released. +This release includes security fixes. +Please check the topics below for details. + +* [CVE-2026-41316: ERB @\_init deserialization guard bypass via def\_module / def\_method / def\_class]({% link en/news/_posts/2026-04-21-erb-cve-2026-41316.md %}) + +This release updates the default gem erb to 4.0.3.1 and the bundled gem net-imap to 0.4.25. The net-imap update fixes CVE-2026-42245, CVE-2026-42246, CVE-2026-42256, CVE-2026-42257, CVE-2026-42258, CVE-2026-47240, CVE-2026-47241 and CVE-2026-47242. Please see the release notes of [net-imap v0.4.24](https://github.com/ruby/net-imap/releases/tag/v0.4.24) and [net-imap v0.4.25](https://github.com/ruby/net-imap/releases/tag/v0.4.25) for the details of these fixes. + Please see the [GitHub releases](https://github.com/ruby/ruby/releases/tag/v3_3_12) for further details. ## Download diff --git a/ja/news/_posts/2026-07-16-ruby-3-3-12-released.md b/ja/news/_posts/2026-07-16-ruby-3-3-12-released.md new file mode 100644 index 0000000000..0aae04068f --- /dev/null +++ b/ja/news/_posts/2026-07-16-ruby-3-3-12-released.md @@ -0,0 +1,48 @@ +--- +layout: news_post +title: "Ruby 3.3.12 リリース" +author: hsbt +translator: hsbt +date: 2026-07-16 05:08:11 +0000 +lang: ja +--- + +Ruby 3.3.12 がリリースされました。 + +このリリースにはセキュリティ修正が含まれています。詳細は以下の記事を参照してください。 + +* [CVE-2026-41316: ERB @\_init deserialization guard bypass via def\_module / def\_method / def\_class]({% link en/news/_posts/2026-04-21-erb-cve-2026-41316.md %}) + +このリリースでは default gem の erb を 4.0.3.1 に、bundled gem の net-imap を 0.4.25 に更新しています。net-imap の更新には CVE-2026-42245、CVE-2026-42246、CVE-2026-42256、CVE-2026-42257、CVE-2026-42258、CVE-2026-47240、CVE-2026-47241 および CVE-2026-47242 の修正が含まれます。これらの修正の詳細は [net-imap v0.4.24](https://github.com/ruby/net-imap/releases/tag/v0.4.24) および [net-imap v0.4.25](https://github.com/ruby/net-imap/releases/tag/v0.4.25) のリリースノートを参照してください。 + +詳細は [GitHub releases](https://github.com/ruby/ruby/releases/tag/v3_3_12) を参照してください。 + +## ダウンロード + +{% assign release = site.data.releases | where: "version", "3.3.12" | first %} + +* <{{ release.url.gz }}> + + SIZE: {{ release.size.gz }} + SHA1: {{ release.sha1.gz }} + SHA256: {{ release.sha256.gz }} + SHA512: {{ release.sha512.gz }} + +* <{{ release.url.xz }}> + + SIZE: {{ release.size.xz }} + SHA1: {{ release.sha1.xz }} + SHA256: {{ release.sha256.xz }} + SHA512: {{ release.sha512.xz }} + +* <{{ release.url.zip }}> + + SIZE: {{ release.size.zip }} + SHA1: {{ release.sha1.zip }} + SHA256: {{ release.sha256.zip }} + SHA512: {{ release.sha512.zip }} + +## リリースコメント + +Ruby 開発者の皆様、バグや脆弱性を報告してくれたユーザーの皆様のご協力により本リリースは行われています。 +皆様のご協力に感謝します。