* SECURITY UPDATE: integer overflow in the size of a compiled regexp pattern - debian/patches/CVE-2026-93577.patch: compare the quantifier expansion size against its limit by division instead of letting tlen * n wrap int, refuse a compiled program larger than INT_MAX/4 while it is emitted, and keep that error from being overwritten by the subexp-call fixup; backport of upstream ruby fa98ef030a + b03e500193 + f6496bca68 (ruby bug #19020, ruby 3.3.13) - Behaviour change inherited from upstream: a pattern whose compiled program would exceed INT_MAX/4 now raises RegexpError "too big compiled program" where it previously hung or produced wrapped jump offsets - CVE-2026-93577 * SECURITY UPDATE: integer overflow in the compiled regexp program size reached through CI/CD-supplied patterns - debian/patches/CVE-2026-93577.patch: same Ruby bug (#19020) and the same patch as CVE-2026-93577; GitLab assigned a second identifier for the pattern source it reached the compiler through - CVE-2026-97229 * SECURITY UPDATE: overflow of the internal repeat and null-check IDs in a pattern with very many repeats - debian/patches/CVE-2026-110264.patch: detect the wrap of the range-repeat and null-check counters when they are narrowed to MemNumType and report it as a compile error; backport of upstream ruby 63eda2681e (ruby bug #16801, ruby 3.3.13) - Behaviour change inherited from upstream: such a pattern now raises RegexpError "too many range repeat" / "too many null check" where it previously compiled to a program with wrapped IDs - CVE-2026-110264