Determine Ruby Version in Images (regular expression cve)

ecki · October 30, 2026, 7:07pm

Hey, whats the easiest way to see in Github whats the current Ruby version in containers is supposed to be for discourse?

IS this issue already addressed in them? Regexp compilation fixes related to GitLab’s CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264 | Ruby

merefield · October 30, 2026, 7:19pm

From the Dockerfile in discourse_docker, e.g.:

image/base/Dockerfile?utm_source=chatgpt.com

main

# NAME:     discourse/base
# VERSION:  release

ARG DEBIAN_RELEASE=trixie
ARG RUBY_VERSION=4.0.9
ARG FROM_DOCKER_IMAGE_TAG=${RUBY_VERSION}-${DEBIAN_RELEASE}-slim
ARG DATESTAMP=0

FROM discourse/ruby:${FROM_DOCKER_IMAGE_TAG} AS builder
ARG DATESTAMP
ARG DEBIAN_RELEASE
ENV DEBIAN_RELEASE=${DEBIAN_RELEASE}
RUN echo "deb http://deb.debian.org/debian ${DEBIAN_RELEASE}-backports main" > "/etc/apt/sources.list.d/${DEBIAN_RELEASE}-backports.list"
RUN apt update &&\
DEBIAN_FRONTEND=noninteractive apt-get -y install wget \
    autoconf build-essential \
    git \
    cmake \
    gnupg \
    libpcre2-dev \

This file has been truncated. show original

RGJ · October 30, 2026, 7:20pm

That issue has been addressed last week

Regexp compilation fixes related to GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264 | Ruby → 4.0.9 has the patches

ecki · October 30, 2026, 11:36pm

Hm ok, I did not see an update in the ESr but maybe the base image changes are not included in the Dashboard. I just run the rebuild now. Thanks

Topic		Replies	Views
Put the version numbers for the different applications used in the /admin/docker page Feature	4	1005	March 27, 2014
Can't get Ruby to update so ./launcher rebuild app keeps failing Self-hosting	15	886	May 22, 2024
Breaking change for people on stable versions (v3.2.1 and down) with discourse_docker Bug docker , stable	2	527	May 20, 2024
Updating failed, unable to rebuild Self-hosting	3	1302	June 9, 2021
Runtime error during upgrade to v3.0.3 Self-hosting	16	1517	April 19, 2023

Determine Ruby Version in Images (regular expression cve)

Related topics