Ruby Security Vulnerabilities: CVE-2026-97229 & 3 More 48min ago
Resolved
Security Update | October 24, 2026
Fusion Arc Hosting has completed its security review and verified the applicable CloudLinux Ruby security patches addressing CVE-2026-97229 & 3 More, vulnerabilities affecting the Ruby regular expression engine that could potentially allow remote code execution under certain conditions.
Security Verification Results:
- All shared hosting infrastructure nodes have been audited for the affected Ruby runtimes.
- CloudLinux security-patched Ruby versions 2.6 through 3.4 have been verified against the vendor's published fixed releases on applicable servers.
- An additional end Fully Managed VPS's have been audited and if needed customers got a patch ticket for further requirements.
- No server reboots, customer application modifications, or service restarts were performed during verification.
Legacy Ruby Versions:
Ruby 2.2, 2.3, 2.4, and 2.5 remain available on applicable servers for legacy application compatibility. However, these versions are end-of-life and have not received security patches under this advisory.
Customers using these legacy versions are strongly advised to migrate to a currently supported Ruby release and maintain updated application dependencies.
Customers remain responsible for their application configurations, compatibility, and dependencies. Fusion Arc Hosting will not automatically modify customer applications or change their selected Ruby versions. Applications may require restarting to begin using updated Ruby interpreters.
Current Security Status: CloudLinux Security Patches Verified
All applicable CloudLinux Ruby 2.6–3.4 runtime packages have been verified against the published security fixes. Separate operating-system Ruby packages remain subject to vendor-specific patch verification, while legacy Ruby versions remain unsupported for these fixes.
Additional Fully Managed VPS/VDS environments, where applicable, remain subject to individual security verification.
Fusion Arc Hosting will continue monitoring CloudLinux, AlmaLinux, and upstream Ruby security advisories and applying applicable infrastructure security updates as they become available.
We remain committed to proactive infrastructure security, protecting customer environments, and maintaining reliable hosting services.
Thank you for choosing Fusion Arc Hosting.
Security Update | October 24, 2026
Fusion Arc Hosting has completed its security review and verified the applicable CloudLinux Ruby security patches addressing CVE-2026-97229 & 3 More, vulnerabilities affecting the Ruby regular expression engine that could potentially allow remote code execution under certain conditions.
Security Verification Results:
- All shared hosting infrastructure nodes have been audited for the affected Ruby runtimes.
- CloudLinux security-patched Ruby versions 2.6 through 3.4 have been verified against the vendor's published fixed releases on applicable servers.
- An additional end Fully Managed VPS's have been audited and if needed customers got a patch ticket for further requirements.
- No server reboots, customer application modifications, or service restarts were performed during verification.
Legacy Ruby Versions:
Ruby 2.2, 2.3, 2.4, and 2.5 remain available on applicable servers for legacy application compatibility. However, these versions are end-of-life and have not received security patches under this advisory.
Customers using these legacy versions are strongly advised to migrate to a currently supported Ruby release and maintain updated application dependencies.
Customers remain responsible for their application configurations, compatibility, and dependencies. Fusion Arc Hosting will not automatically modify customer applications or change their selected Ruby versions. Applications may require restarting to begin using updated Ruby interpreters.
Current Security Status: CloudLinux Security Patches Verified
All applicable CloudLinux Ruby 2.6–3.4 runtime packages have been verified against the published security fixes. Separate operating-system Ruby packages remain subject to vendor-specific patch verification, while legacy Ruby versions remain unsupported for these fixes.
Additional Fully Managed VPS/VDS environments, where applicable, remain subject to individual security verification.
Fusion Arc Hosting will continue monitoring CloudLinux, AlmaLinux, and upstream Ruby security advisories and applying applicable infrastructure security updates as they become available.
We remain committed to proactive infrastructure security, protecting customer environments, and maintaining reliable hosting services.
Thank you for choosing Fusion Arc Hosting.