Security fixes

• CVE-2025-27219, CVE-2025-27220 and CVE-2025-27221

What's Changed

• Bug #21092: error building ruby 3.4.1 on cygwin/msys2 - Ruby - Ruby Issue Tracking System
• Bug #21170: Corrupted Hash (bad VALUE and missing entry) when -1 returned from .hash - Ruby - Ruby Issue Tracking System
• Bug #21144: Win32: Use Windows time zone ID as the time zone name if TZ is not set - Ruby - Ruby Issue Tracking System
• Bug #18257: rb_mRubyVMFrozenCore is broken by GC run - Ruby - Ruby Issue Tracking System
• Bug #21032: Module#autoload? is slow when $LOAD_PATH contains a relative path - Ruby - Ruby Issue Tracking System
• Bug #21131: IO.copy_stream: yielded string changes value when duped - Ruby - Ruby Issue Tracking System
• Bug #19584: Crash in rb_gc_register_address - Ruby - Ruby Issue Tracking System
• Bug #21180: SEGV while marking imemo_env->iseq - Ruby - Ruby Issue Tracking System
• Bug #20025: Parsing identifiers/constants is case-folding dependent - Ruby - Ruby Issue Tracking System
• Bug #19426: Endless Range#step of object with #succ method does not work - Ruby - Ruby Issue Tracking System

Note: This list is automatically generated by tool/gen-github-release.rb. Because of this, some commits may be missing.

Full Changelog

v3_2_7...v3_2_8