Ruby 4.0.5 Released

Ruby 4.0.5 has been released.

This release only contains a security fix for CVE-2026-46727: Use-after-free in pthread-based getaddrinfo timeout handler and a build system regression in Ruby 4.0.4 under C locale [Bug #22065].

Please see the GitHub releases for further details.

Release Schedule

We intend to release the latest stable Ruby version (currently Ruby 4.0) every two months following the most recent regular release. Ruby 4.0.6 will be released in July, 4.0.7 in September, and 4.0.8 in November.

If a change arises that significantly affects users, a release may occur earlier than planned, and the subsequent schedule may shift accordingly.

Download

• https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.5.tar.gz

  SIZE: 23818557
  SHA1: efa77332e323c15a86e1a25a3ae53bd21972672c
  SHA256: 7d6149079a63f8ae1d326c9fa65c6019ba2dc3155eae7b39159817911c88958e
  SHA512: ce50c8dda1479f5a84771df37cdb23f0183bba900494e7492bb90d4b0a3e60ff28b799f3c469977f5f7c1335a6c1f3400a9ca52cd4acfcbed08f016d352943f4
  

• https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.5.tar.xz

  SIZE: 17893756
  SHA1: 58216f1858feed4e2dbd2719a0a7ae807563b428
  SHA256: 5dc5521ea54c726e6cc10b1b5a0f4004b27b482e61c04c99aed79315e30895e5
  SHA512: 379d78a6d1af0455df60da46551f43438ad3ee81f83787554fc34cb1c8febb1bd363e3dc1a057b34a69f96526efc308d3dccc4b87d368897c2d1ccf179096463
  

• https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.5.zip

  SIZE: 29122529
  SHA1: cda48124428ae33497f191bb676c8022615ab91e
  SHA256: 605f8b22e12f5cfc3f4a48850a7fe7dc9b010002d2c994d7508f38c63d2c0ff8
  SHA512: c4faaefa386bb33dc4cb3994d740b0c8b4756726351df6cc0850dbd2598f3ba51dcfb38bd61d91f63adf3612bb5f6dbd727446caf9af78f5df36e7d31ecf113a
  

Release Comment

Many committers, developers, and users who provided bug reports helped us make this release. Thanks for their contributions.

Posted by k0kubun on 20 May 2026

41 2026-05-25 15:00:01