Fixed CVEs
No known. But there's a chance Ruby 4.0.8 patches CVEs from Ruby 4.0.7.
Open CVEs
| Identifier | CVSS 3.1 Score | Affects |
|---|---|---|
| CVE-2026-54696 | 3.7 | pkg:gem/json@2.18.0 |
| CVE-2026-33210 | N/A | pkg:gem/json@2.18.0 |
What's Changed
Component Changes:
| Component | Old Version | New Version |
|---|---|---|
| ruby-4.0 | 4.0.7 | 4.0.8 |
| rubygem-aws-eventstream | 1.4.0 | 1.4.1 |
| rubygem-aws-partitions | 1.1296.0 | 1.1297.0 |
| rubygem-aws-sdk-core | 3.259.0 | 3.260.0 |
| rubygem-aws-sdk-ec2 | 1.658.0 | 1.659.0 |
Other Changes
- Promote puppet-runtime 2026.10.22.1 into main by @OpenVoxProjectBot in #743
Full Changelog: 9.1.1...9.2.0