Hi Utkarsh,
I've actually managed to prepare a final update that I'm ready to upload - this has quite some fixes plus 2 new CVE fixes. Would you please test the new resulting binaries and make sure they look sane enough? :) The binaries can be found at https://people.debian.org/~utkarsh/lts/ruby2.5/. Many thanks!
I don't use ruby outside of puppet, but my puppet problem is fixed with these binaries. So from my POV you can release it.
Many thanks! Bernhard