Release date:
2026-10-27 13:03:32 UTC
Description:
- CVE-2026-93577, CVE-2026-97229: integer overflow in the size of a compiled
pattern - the nested-repeat expansion guard and the compiled program size
both wrapped int. Patterns whose compiled program exceeds INT_MAX/4 now
raise RegexpError "too big compiled program".
- CVE-2026-110264: overflow of the internal range-repeat and null-check IDs
in a pattern with very many repeats. Such patterns now raise RegexpError
"too many range repeat" / "too many null check".
- All three are reachable whenever a regexp is built from untrusted input
(Regexp.new/compile/union or /#{}/); Regexp.timeout does not protect
against them. Backport of the Ruby 3.3.13 regexp fixes (bugs #13332,
Updated packages:
-
alt-ruby32-3.2.11-16.el9.x86_64.rpm
sha:b0abc367012fded6d0edc258dfbdb6ca67e63e3eb9a673bb0b5f2a8d2194d7bf
-
alt-ruby32-bundled-gems-3.2.11-16.el9.x86_64.rpm
sha:a14f61f7e4353c0f12668f7dca718648cfad55705e98ddc2f2fcd543d8d19f2a
-
alt-ruby32-default-gems-3.2.11-16.el9.noarch.rpm
sha:3cda8c3dae4293c8cf2371cbffc3d1aea9d7808a0f358a888aa4ea25726bfde6
-
alt-ruby32-devel-3.2.11-16.el9.x86_64.rpm
sha:2c3a4c9bcb9c695d8ee90189afd5950893ac2c1c177f6cecdd996964b55695af
-
alt-ruby32-doc-3.2.11-16.el9.noarch.rpm
sha:ac34f767505ad285a1dd2cd186a6f5549ee5c723762b52f56d4124f220b22b94
-
alt-ruby32-libs-3.2.11-16.el9.x86_64.rpm
sha:cffdada8513d1f0a81a676f3642a288612b5e0932505455f3ade2335bc5d7f85
-
alt-ruby32-rubygem-bigdecimal-3.1.3-16.el9.x86_64.rpm
sha:22833c7b6c67f4d7897d519245b4f42064aee24bcb153f2e5e6b046966d73f0b
-
alt-ruby32-rubygem-bundler-2.4.19-16.el9.noarch.rpm
sha:96847ec02da6f7fc6d7a7a62c3459142783047237da24240287f03c62e8861eb
-
alt-ruby32-rubygem-io-console-0.6.0-16.el9.x86_64.rpm
sha:c9a79ce2b9a1f0d5fa67cc3b6ed96204770187fe16043a582289a8712d394b6e
-
alt-ruby32-rubygem-irb-1.6.2-16.el9.noarch.rpm
sha:a6997bcb8b5f563e4be8d191d4a5b1e0ba5a80be4565902800c531dfe602c0f1
-
alt-ruby32-rubygem-json-2.6.3-16.el9.x86_64.rpm
sha:e1ab3a9098a42024bbdd77ba60a3ff87f3ce238abd1da765f7c8813dc5c01c8c
-
alt-ruby32-rubygem-minitest-5.25.1-16.el9.noarch.rpm
sha:39917ab10e275773d4c4a19944e9a0a662bc3af2f734cc2a42a3f4befa1bd486
-
alt-ruby32-rubygem-power_assert-2.0.3-16.el9.noarch.rpm
sha:2f99f277c5eae584ade45bf193d3bc6c48a1d94ab2bdffa9ef407070915d8d19
-
alt-ruby32-rubygem-psych-5.0.1-16.el9.x86_64.rpm
sha:094bfd924c53921bc452754b168d5247852ee5220b5445ab10a4c3f107822ad0
-
alt-ruby32-rubygem-rake-13.0.6-16.el9.noarch.rpm
sha:be40b28b34ecb0e917d0927751c8f9d80e1b794edf704c6a02cf1ea6252cfb90
-
alt-ruby32-rubygem-rbs-2.8.2-16.el9.x86_64.rpm
sha:757273c2772c15609b1ed94a36aeed1e6c24d33d3c4c0111e725c805650e83b7
-
alt-ruby32-rubygem-rdoc-6.5.1.1-16.el9.noarch.rpm
sha:c8d539b064118cbc41f68a6df0f61d08a4315a0917f16b0259e15c5cdd90210f
-
alt-ruby32-rubygem-rexml-3.4.4-16.el9.noarch.rpm
sha:5609ad44e370275e7b02ea846cbccfe490881c311c26764b1155d445a605be72
-
alt-ruby32-rubygem-rss-0.3.1-16.el9.noarch.rpm
sha:e100a64b753d64da6361ad0c936cb0652031e558dd28f6f67ff445592876297e
-
alt-ruby32-rubygem-test-unit-3.5.7-16.el9.noarch.rpm
sha:259af8de206e62adca6a8e1204674ec4969070ef430a579c07b0851a43ee99e9
-
alt-ruby32-rubygem-typeprof-0.21.3-16.el9.noarch.rpm
sha:9559a8b5e12015d358fbd8b0f022c6214bed7b03932dd182102c07a4bcd317ed
-
alt-ruby32-rubygems-3.4.19-16.el9.noarch.rpm
sha:83ab191c8fcbcaa86fff965c21c72b1bf36e00392b06606dd7be84c5b09ef8d8
-
alt-ruby32-rubygems-devel-3.4.19-16.el9.noarch.rpm
sha:8d6c31c850c14386140ddbf6a86e1b0954abe0ba02130903d58f63db0978ed87
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
