Ruby Issue Tracking System

10/10/2025

06:53 AM Ruby Bug #21631: Backport openssl gem bugfix releases

`OpenSSL::X509::V_FLAG_CRL_CHECK` can make sense on cert stores with `OpenSSL::X509::Store#set_default_paths` but only if you have also did `OpenSSL::X509::Store#add_crl` as there is no such thing as a default CRL file. Calling that on `... Bo98 (Bo Anderson)

10/09/2025

04:25 AM Ruby Bug #21631: Backport openssl gem bugfix releases

Thanks for taking a look!
Ruby 3.2 PR: https://github.com/ruby/ruby/pull/14797 Bo98 (Bo Anderson)

03:34 AM Ruby Bug #21631 (Closed): Backport openssl gem bugfix releases

The openssl gem has made new patch releases for all supported release lines in order to fix a compatibility issue with OpenSSL 3.6.0 (along with other bug fixes such as one for a segfault). Without the compatibility fix, the openssl gem ... Bo98 (Bo Anderson)

03:57 AM Ruby Bug #21632 (Closed): Backport REXML CVE-2025-58767 fix

Even though it's a bundled gem and not a default gem, it would be worthwhile backporting the fix for CVE-2025-58767 (https://www.ruby-lang.org/en/news/2025/09/18/dos-rexml-cve-2025-58767/).
Ruby 3.4 PR: https://github.com/ruby/ruby/pu... Bo98 (Bo Anderson)

09/04/2024

05:06 AM Ruby Bug #20713: Ruby 3.3.5 triggers a deprecation warning with `require "json"`

Ah is the default `json` gem no longer supported too? This broke REXML CI: https://github.com/ruby/rexml/actions/runs/10695343850/job/29648614890 because `rdoc` uses `json` from the standard library and I see the same warning from runnin... Bo98 (Bo Anderson)

04:53 AM Ruby Bug #20713 (Closed): Ruby 3.3.5 triggers a deprecation warning with `require "json"`

Can be reproduced with `bundle exec ruby -e "require 'json'"`:
```
/opt/hostedtoolcache/Ruby/3.3.5/x64/lib/ruby/3.3.0/json/common.rb:3: warning: ostruct was loaded from the standard library, but will no longer be part of the default ... Bo98 (Bo Anderson)

05/20/2024

05:23 PM Ruby Bug #20499 (Closed): Ruby builds on macOS store absolute paths for AR and NM in rbconfig since Ruby 3.2.3/3.3.0

This is a regression introduced by https://github.com/ruby/ruby/commit/038f9ade3c4d965415e4956561975454cf9eeb21 and causes various downstream problems such as https://github.com/ruby/prism/issues/2716. Development tools on macOS are relo... Bo98 (Bo Anderson)

04/24/2024

11:12 AM Ruby Bug #20451 (Closed): Bad Ruby 3.1.5 backport causes fiddle to fail to build

Ruby 3.1.5 shipped with the following backport: https://github.com/ruby/ruby/commit/84f2aabd272a54e79979795d2d405090704a1d07
However this backport directly breaks the build:
```
closure.c:279:60: error: use of undeclared identifi... Bo98 (Bo Anderson)

11/20/2023

04:07 PM Ruby Bug #20010: Backport 84a12d65 (Fix compile error on older systems without clock_get*)

I unfortunately did not have any permissions to change the Backport field - only Ruby maintainers are allowed to edit it. Thanks for doing so for me! Bo98 (Bo Anderson)

02:48 PM Ruby Bug #20010 (Closed): Backport 84a12d65 (Fix compile error on older systems without clock_get*)

Commit 84a12d657848dfb54f8cc556d344f017a793e95a
This fixes a build regression in 3.2.
3.1 and earlier are not affected.
Cherry-pick is trivial: https://github.com/ruby/ruby/pull/8948
and the risk is very low. Bo98 (Bo Anderson)