[CLSA-2026:1793114888] Fix CVE(s): CVE-2026-110264, CVE-2026-93577, CVE-2026-97229
Type:
security
Severity:
Critical
Release date:
2026-10-27 15:28:22 UTC
Description:
* SECURITY UPDATE: Onigmo wrote repeat and null-check ids into the compiled program through a signed 16-bit type without checking them - debian/patches/CVE-2026-110264.patch: range-check reg->num_repeat and reg->num_null_check so a pattern with more than 32767 bounded repeats or null checks raises RegexpError instead of compiling with wrapped ids and segfaulting at match time; upstream ruby 63eda2681e (bug #16801) - CVE-2026-110264 * SECURITY UPDATE: integer overflow in the Onigmo compiler's program-size accounting - debian/patches/CVE-2026-93577.patch: compare against the quantifier expansion limit by division instead of multiplying into int, cap the emitted program at MAX_COMPILED_PROGRAM_SIZE, and stop that error being overwritten for patterns using subexp calls; upstream ruby fa98ef030a, b03e500193, f6496bca68 (bug #19020) - CVE-2026-93577 * SECURITY UPDATE: the same Onigmo program-size overflow under a second id - one upstream fix covers both ids, carried by the same patch - CVE-2026-97229
CVEs fixed:
Updated packages:
  • alt-ruby31_3.1.7-15_amd64.deb
    sha:ac67d5527c47a71446e6fc693c8e44fc00ce8ff0
  • alt-ruby31-bundled-gems_3.1.7-15_amd64.deb
    sha:52040adcbfab92a70f0784053c5adec77ced9711
  • alt-ruby31-default-gems_3.1.7-15_amd64.deb
    sha:769f09c1b9def3fa8dc7f402066b64a2b52a2852
  • alt-ruby31-devel_3.1.7-15_amd64.deb
    sha:08d7e9d35dbed97c9770d5e7d71639ba8c4827dc
  • alt-ruby31-doc_3.1.7-15_amd64.deb
    sha:4f3a21e8a4705c9c50a5df6a9b76db3311ad4d78
  • alt-ruby31-libs_3.1.7-15_amd64.deb
    sha:09799823e3b5f1a6716557dacdc654e991c8d091
  • alt-ruby31-rubygem-bigdecimal_3.1.1-15_amd64.deb
    sha:40431cef13a3248cf409272d5cc77fc057b64a51
  • alt-ruby31-rubygem-bundler_2.3.27-15_amd64.deb
    sha:e92666a03394732972ed9cbd3be42c606156f2fa
  • alt-ruby31-rubygem-io-console_0.5.11-15_amd64.deb
    sha:54f7ca5441222343bda9e5eb90a4a9b19280c98d
  • alt-ruby31-rubygem-irb_1.4.1-15_amd64.deb
    sha:9efa7d6dfccd4579e1d317a598395e6f4d353bf4
  • alt-ruby31-rubygem-json_2.6.1-15_amd64.deb
    sha:b4fb4522f7a25ab32867bc00d6300efe83764d4c
  • alt-ruby31-rubygem-minitest_5.15.0-15_amd64.deb
    sha:79533572c6f0d945340b35818d05fe60520c8842
  • alt-ruby31-rubygem-power-assert_2.0.1-15_amd64.deb
    sha:f6d938429f089c302b0e2799ce2ac6ad55e67db8
  • alt-ruby31-rubygem-psych_4.0.4-15_amd64.deb
    sha:996345825237b172cede6eba50547c0bf0fdd034
  • alt-ruby31-rubygem-rake_13.0.6-15_amd64.deb
    sha:dfea935be038efe03263340dc9f5babbc1ff4fb6
  • alt-ruby31-rubygem-rbs_2.7.0-15_amd64.deb
    sha:85c029a6550a9f1cb8ce7178f306a8088084fdde
  • alt-ruby31-rubygem-rdoc_6.4.1.1-15_amd64.deb
    sha:d99f3cfe3d013d189795b273990e0c5c73b8a57d
  • alt-ruby31-rubygem-rexml_3.3.9-15_amd64.deb
    sha:0996033e4c4a12c2ef760531980d347967e1900e
  • alt-ruby31-rubygem-rss_0.3.1-15_amd64.deb
    sha:aa80b89126fe9589c98acb4bbc47978cb87d8f12
  • alt-ruby31-rubygem-test-unit_3.5.3-15_amd64.deb
    sha:bcf7b5af7cc8fbfb08d9cf037825bd2189e015d1
  • alt-ruby31-rubygem-typeprof_0.21.3-15_amd64.deb
    sha:c7845dd6168c0f883a25b0a347a5e6f11f7bd635
  • alt-ruby31-rubygems_3.3.27-15_amd64.deb
    sha:06fd4c02ad581a3c46d1775998387afe35df3d85
  • alt-ruby31-rubygems-devel_3.3.27-15_amd64.deb
    sha:a0b354cdd44d4d6f9608216e53db6eb0d54f484b
  • alt-ruby31_3.1.7-15_arm64.deb
    sha:3f7ae6152cde3d5437d5983fbd7156dc01535aeb
  • alt-ruby31-bundled-gems_3.1.7-15_arm64.deb
    sha:d1b29197e106be0f395399a8239e0f6df561e7a0
  • alt-ruby31-default-gems_3.1.7-15_arm64.deb
    sha:4b4b0656087f9af70cfb2675bb2dccad5cd18eb5
  • alt-ruby31-devel_3.1.7-15_arm64.deb
    sha:3765402719159aa48420b21f02fe551cba384aed
  • alt-ruby31-doc_3.1.7-15_arm64.deb
    sha:b05399f298ebaf130de7d669527fbddcc7df96d5
  • alt-ruby31-libs_3.1.7-15_arm64.deb
    sha:4e6e849d54638f4b8b2428eccf4fbfe113872331
  • alt-ruby31-rubygem-bigdecimal_3.1.1-15_arm64.deb
    sha:a9c00c91162adc1ed1feebd5de99abd305acb5ad
  • alt-ruby31-rubygem-bundler_2.3.27-15_arm64.deb
    sha:bb591651ed74052c3c0b9fe9d33a35e7ab732015
  • alt-ruby31-rubygem-io-console_0.5.11-15_arm64.deb
    sha:8ea416413acd9fbe1313f6d85998c6a5957ec821
  • alt-ruby31-rubygem-irb_1.4.1-15_arm64.deb
    sha:3a66bc6e604ebfc5990413303b16a41a8b79d9be
  • alt-ruby31-rubygem-json_2.6.1-15_arm64.deb
    sha:4904535919637206d62ad4b6cb005f16e589b2f8
  • alt-ruby31-rubygem-minitest_5.15.0-15_arm64.deb
    sha:5fdb28603e102204a58a5658b4df125b895406b3
  • alt-ruby31-rubygem-power-assert_2.0.1-15_arm64.deb
    sha:3355f1c2c73147dc17f6432523d9b55a4fb88b97
  • alt-ruby31-rubygem-psych_4.0.4-15_arm64.deb
    sha:e45322d08905aeaeb8d13f7155d54792ba24595c
  • alt-ruby31-rubygem-rake_13.0.6-15_arm64.deb
    sha:806a6e4aa0015b26f44a6f32e6a9b5c53b7f7500
  • alt-ruby31-rubygem-rbs_2.7.0-15_arm64.deb
    sha:119a0502c11536f397c8a7706485a5269c8c02b6
  • alt-ruby31-rubygem-rdoc_6.4.1.1-15_arm64.deb
    sha:fa8c6cfc5de0fba259dd0730f87759a0d066c010
  • alt-ruby31-rubygem-rexml_3.3.9-15_arm64.deb
    sha:40d3f94c2d42786c41aeee4fe0b54e2a828a11f2
  • alt-ruby31-rubygem-rss_0.3.1-15_arm64.deb
    sha:72f102a03e4cbb44fee1ace2c55683db7223893f
  • alt-ruby31-rubygem-test-unit_3.5.3-15_arm64.deb
    sha:90324dd68f62a0ad8e07bb4a2e9f61c41e744e4a
  • alt-ruby31-rubygem-typeprof_0.21.3-15_arm64.deb
    sha:7eb11333a93000be9f4992c4ea3f254d78a10b10
  • alt-ruby31-rubygems_3.3.27-15_arm64.deb
    sha:7b576a5a687b39c1c4d5173d28f5ecbb105e45c0
  • alt-ruby31-rubygems-devel_3.3.27-15_arm64.deb
    sha:337fa0f22649bd9a80e8ad689e6aa3af7390c4a5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.