Ruby Issue Tracking System

11/07/2026

04:07 PM Ruby Revision e67e4a69 (git): [ruby/openssl] ssl: remove dependency on io/nonblock

Use C API rb_io_set_nonblock() instead.
https://github.com/ruby/openssl/commit/7bf23b629e rhenium (Kazuki Yamaguchi)

03:18 PM Ruby Revision 9fc86fc5 (git): [ruby/openssl] cipher: fix use-after-free in in-place Cipher#update

Take RSTRING_PTR() of the input buffer after resizing the output
buffer, as the input and output buffers may be the same String object.
Also explicitly reject in-place Cipher#update when the input is too
large to process in a single EVP... rhenium (Kazuki Yamaguchi)

10/29/2026

04:59 PM Ruby Revision 45bcb337 (git): [ruby/openssl] hmac: allocate OpenSSL objects in #initialize{,_copy}

Allocate EVP_MD_CTX in OpenSSL::HMAC#initialize and #initialize_copy
instead of .allocate. <https://github.com/ruby/openssl/pull/1046>
made similar changes to several other classes, but overlooked HMAC.
This fixes crash in OpenSSL::HMAC... rhenium (Kazuki Yamaguchi)

04:59 PM Ruby Revision 0819f553 (git): [ruby/openssl] ocsp: use ossl_want_uninitialized() in BasicResponse#initialize

Commit https://github.com/ruby/openssl/commit/5f104287930a (ocsp: allocate OpenSSL objects in #initialize{,
_copy}, 2025-12-07) forgot to add this line.
https://github.com/ruby/openssl/commit/787afbf9f8 rhenium (Kazuki Yamaguchi)

10/24/2026

09:23 AM Ruby Revision f272b3e2 (git): [ruby/openssl] ssl: fix NoMethodError on SAN dNSName with an empty label

Handle the empty label as a literal string.
OpenSSL::SSL::SSLSocket#post_connection_check can raise NoMethodError
when the server certificate contains a malformed subjectAltName
extension with a dNSName that starts with ".", such as ".e... rhenium (Kazuki Yamaguchi)

10/23/2026

03:55 AM Ruby Revision 844a1675 (git): test/ruby/test_io.rb: do not set RLIMIT_NPROC

On my computer, setting RLIMIT_NPROC to the low value of 2048 prevents
the forked process from creating any new native threads and it causes
make test-all to hang forever.
Remove it, as it does not seem to serve any purpose here.
(cher... rhenium (Kazuki Yamaguchi)

03:55 AM Ruby Revision 9bcca300 (git): test/ruby/test_process.rb: simplify testing spawn with long strings

test_aspawn_too_long_path just wants to verify that passing a very long
string to spawn does not cause a crash. Use an input string that is long
enough for this purpose and does not ends up with spawning too many
processes.
This change ... rhenium (Kazuki Yamaguchi)

10/13/2026

07:21 PM Ruby Revision fa8df43b (git): test/ruby/test_process.rb: simplify testing spawn with long strings

test_aspawn_too_long_path just wants to verify that passing a very long
string to spawn does not cause a crash. Use an input string that is long
enough for this purpose and does not ends up with spawning too many
processes.
This change ... rhenium (Kazuki Yamaguchi)

06:08 PM Ruby Bug #22424: IO#readpartial and IO#sysread should respect IO#timeout= value

I've opened a GitHub PR: https://github.com/ruby/ruby/pull/19292 rhenium (Kazuki Yamaguchi)

06:07 PM Ruby Bug #22433: IO#sysread and IO#pread are inconsistent for length 0 and negative numbers

I've opened a GitHub PR: https://github.com/ruby/ruby/pull/19323 rhenium (Kazuki Yamaguchi)