[CLSA-2026:1793114701] Fix CVE(s): CVE-2026-110264, CVE-2026-93577, CVE-2026-97229
Type:
security
Severity:
Critical
Release date:
2026-10-27 15:25:15 UTC
Description:
* SECURITY UPDATE: Onigmo wrote repeat and null-check ids into the compiled program through a signed 16-bit type without checking them - debian/patches/CVE-2026-110264.patch: range-check reg->num_repeat and reg->num_null_check so a pattern with more than 32767 bounded repeats or null checks raises RegexpError instead of compiling with wrapped ids and segfaulting at match time; upstream ruby 63eda2681e (bug #16801) - CVE-2026-110264 * SECURITY UPDATE: integer overflow in the Onigmo compiler's program-size accounting - debian/patches/CVE-2026-93577.patch: compare against the quantifier expansion limit by division instead of multiplying into int, cap the emitted program at MAX_COMPILED_PROGRAM_SIZE, and stop that error being overwritten for patterns using subexp calls; upstream ruby fa98ef030a, b03e500193, f6496bca68 (bug #19020) - CVE-2026-93577 * SECURITY UPDATE: the same Onigmo program-size overflow under a second id - one upstream fix covers both ids, carried by the same patch - CVE-2026-97229
CVEs fixed:
Updated packages:
  • alt-ruby31_3.1.7-15_amd64.deb
    sha:3ad5878b18c7a7fff63fdc2f53c7092d077d36ba
  • alt-ruby31-bundled-gems_3.1.7-15_amd64.deb
    sha:7e544eeab3d1942c09c67829ceba99a82e415c07
  • alt-ruby31-default-gems_3.1.7-15_amd64.deb
    sha:769f09c1b9def3fa8dc7f402066b64a2b52a2852
  • alt-ruby31-devel_3.1.7-15_amd64.deb
    sha:64699ad2bfcc8366f414837f27be1904f203b45f
  • alt-ruby31-doc_3.1.7-15_amd64.deb
    sha:ddcf27af201447e1a2b8331455c0722672671cdb
  • alt-ruby31-libs_3.1.7-15_amd64.deb
    sha:8e0ca1833bb06c27808d797dc6e117ebf54c5fc6
  • alt-ruby31-rubygem-bigdecimal_3.1.1-15_amd64.deb
    sha:fddb4e944f50874e3432a211cc7f7460061d72b6
  • alt-ruby31-rubygem-bundler_2.3.27-15_amd64.deb
    sha:e92666a03394732972ed9cbd3be42c606156f2fa
  • alt-ruby31-rubygem-io-console_0.5.11-15_amd64.deb
    sha:d27c3c148a09d43d5efbe3a764d18fb24f3f72ea
  • alt-ruby31-rubygem-irb_1.4.1-15_amd64.deb
    sha:9efa7d6dfccd4579e1d317a598395e6f4d353bf4
  • alt-ruby31-rubygem-json_2.6.1-15_amd64.deb
    sha:df8499af670ef0408116fa5e2f04e5a71002f3d8
  • alt-ruby31-rubygem-minitest_5.15.0-15_amd64.deb
    sha:79533572c6f0d945340b35818d05fe60520c8842
  • alt-ruby31-rubygem-power-assert_2.0.1-15_amd64.deb
    sha:f6d938429f089c302b0e2799ce2ac6ad55e67db8
  • alt-ruby31-rubygem-psych_4.0.4-15_amd64.deb
    sha:b6d8480bfcf9508be4d9a5d2a2b52c41f802d2fb
  • alt-ruby31-rubygem-rake_13.0.6-15_amd64.deb
    sha:dfea935be038efe03263340dc9f5babbc1ff4fb6
  • alt-ruby31-rubygem-rbs_2.7.0-15_amd64.deb
    sha:c44e07326a8354302c866c1d66254c3d0a484892
  • alt-ruby31-rubygem-rdoc_6.4.1.1-15_amd64.deb
    sha:d99f3cfe3d013d189795b273990e0c5c73b8a57d
  • alt-ruby31-rubygem-rexml_3.3.9-15_amd64.deb
    sha:0996033e4c4a12c2ef760531980d347967e1900e
  • alt-ruby31-rubygem-rss_0.3.1-15_amd64.deb
    sha:aa80b89126fe9589c98acb4bbc47978cb87d8f12
  • alt-ruby31-rubygem-test-unit_3.5.3-15_amd64.deb
    sha:bcf7b5af7cc8fbfb08d9cf037825bd2189e015d1
  • alt-ruby31-rubygem-typeprof_0.21.3-15_amd64.deb
    sha:c7845dd6168c0f883a25b0a347a5e6f11f7bd635
  • alt-ruby31-rubygems_3.3.27-15_amd64.deb
    sha:06fd4c02ad581a3c46d1775998387afe35df3d85
  • alt-ruby31-rubygems-devel_3.3.27-15_amd64.deb
    sha:a0b354cdd44d4d6f9608216e53db6eb0d54f484b
  • alt-ruby31_3.1.7-15_arm64.deb
    sha:c6f45608f42d6cf4cb4451b89e09fcb53950ed21
  • alt-ruby31-bundled-gems_3.1.7-15_arm64.deb
    sha:62f7d0e01a71b1384bebfa27b647b18881068471
  • alt-ruby31-default-gems_3.1.7-15_arm64.deb
    sha:4b4b0656087f9af70cfb2675bb2dccad5cd18eb5
  • alt-ruby31-devel_3.1.7-15_arm64.deb
    sha:b1ded923af340d1825cf16f0da2712a5d206f23f
  • alt-ruby31-doc_3.1.7-15_arm64.deb
    sha:b05399f298ebaf130de7d669527fbddcc7df96d5
  • alt-ruby31-libs_3.1.7-15_arm64.deb
    sha:cb01e02899920bf7071915770b7658ad9d53de0a
  • alt-ruby31-rubygem-bigdecimal_3.1.1-15_arm64.deb
    sha:841b2699151942dddd473f1245b13620c3b98904
  • alt-ruby31-rubygem-bundler_2.3.27-15_arm64.deb
    sha:bb591651ed74052c3c0b9fe9d33a35e7ab732015
  • alt-ruby31-rubygem-io-console_0.5.11-15_arm64.deb
    sha:5fb7421903628955ea8b30710481eea47e161a0a
  • alt-ruby31-rubygem-irb_1.4.1-15_arm64.deb
    sha:3a66bc6e604ebfc5990413303b16a41a8b79d9be
  • alt-ruby31-rubygem-json_2.6.1-15_arm64.deb
    sha:2176d6b972593597fc593750537f8e5459cc5fcf
  • alt-ruby31-rubygem-minitest_5.15.0-15_arm64.deb
    sha:5fdb28603e102204a58a5658b4df125b895406b3
  • alt-ruby31-rubygem-power-assert_2.0.1-15_arm64.deb
    sha:3355f1c2c73147dc17f6432523d9b55a4fb88b97
  • alt-ruby31-rubygem-psych_4.0.4-15_arm64.deb
    sha:4ccdf0b4284d2b3dc7bc76b58ddadc5632e10677
  • alt-ruby31-rubygem-rake_13.0.6-15_arm64.deb
    sha:806a6e4aa0015b26f44a6f32e6a9b5c53b7f7500
  • alt-ruby31-rubygem-rbs_2.7.0-15_arm64.deb
    sha:f7fb2f0247e88f07af3a93b2da6a9ee22ae221fa
  • alt-ruby31-rubygem-rdoc_6.4.1.1-15_arm64.deb
    sha:fa8c6cfc5de0fba259dd0730f87759a0d066c010
  • alt-ruby31-rubygem-rexml_3.3.9-15_arm64.deb
    sha:40d3f94c2d42786c41aeee4fe0b54e2a828a11f2
  • alt-ruby31-rubygem-rss_0.3.1-15_arm64.deb
    sha:72f102a03e4cbb44fee1ace2c55683db7223893f
  • alt-ruby31-rubygem-test-unit_3.5.3-15_arm64.deb
    sha:90324dd68f62a0ad8e07bb4a2e9f61c41e744e4a
  • alt-ruby31-rubygem-typeprof_0.21.3-15_arm64.deb
    sha:7eb11333a93000be9f4992c4ea3f254d78a10b10
  • alt-ruby31-rubygems_3.3.27-15_arm64.deb
    sha:7b576a5a687b39c1c4d5173d28f5ecbb105e45c0
  • alt-ruby31-rubygems-devel_3.3.27-15_arm64.deb
    sha:337fa0f22649bd9a80e8ad689e6aa3af7390c4a5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.