# ruby-zip security updates

Patch Radar has 2 security fixes for ruby-zip, closing 2 CVEs. The newest is DEBIAN-CVE-2026-85396 (3.4.0+dfsg-1), released September 4, 2026.

- Web page: https://patchblox.com/security/product/linux/ruby-zip
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2026-85396](https://patchblox.com/security/data/fix/linux/debian-cve-2026-85396.md) | Sep 4, 2026 | Debian 14 3.4.0+dfsg-1 | High | 1 | 0 |
| [ruby-zip 1.2.1-1.1~build0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-ruby-zip-1.2.1-1.1-build0.18.04.1.md) | Jun 26, 2018 | Ubuntu 18.04.6 LTS (bionic) 1.2.1-1.1~build0.18.04.1 | Routine | 1 | 0 |

---

Data as of 2026-11-06T17:00:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo