Release date:
2026-10-27 13:07:00 UTC
Description:
- CVE-2026-93577, CVE-2026-97229: integer overflow in the size of a compiled
pattern - the nested-repeat expansion guard and the compiled program size
both wrapped int. Patterns whose compiled program exceeds INT_MAX/4 now
raise RegexpError "too big compiled program".
- CVE-2026-110264: overflow of the internal range-repeat and null-check IDs
in a pattern with very many repeats. Such patterns now raise RegexpError
"too many range repeat" / "too many null check".
- All three are reachable whenever a regexp is built from untrusted input
(Regexp.new/compile/union or /#{}/); Regexp.timeout does not protect
against them. Backport of the Ruby 3.3.13 regexp fixes (bugs #13332,
Updated packages:
-
alt-ruby32-3.2.11-16.el10.x86_64.rpm
sha:79fb666bd7e11e9171868eff1ec234d67f2cdb3b58ceba2da4bad8b3ad2efc30
-
alt-ruby32-bundled-gems-3.2.11-16.el10.x86_64.rpm
sha:b4f96744ef6dd3133886eb27a97fd0a9949c7d59a13171f620be9a91ac3deec5
-
alt-ruby32-default-gems-3.2.11-16.el10.noarch.rpm
sha:bb696019e7b7251174182196fdd73b5578f994c980d0888382a32babd482709f
-
alt-ruby32-devel-3.2.11-16.el10.x86_64.rpm
sha:a4e9baf88e32146aec80cd124ebe052f28ce1ec548d60910a0ae5aeacfb2cebe
-
alt-ruby32-doc-3.2.11-16.el10.noarch.rpm
sha:d571dc30b15af7c5e35c7ba57e3b783a594da60c45f3c083b14a66893a3e2e92
-
alt-ruby32-libs-3.2.11-16.el10.x86_64.rpm
sha:3b5b37ffe9df4145c6cdf7d064f17084244ac64a0e89763ea5ac9cbb242afe0d
-
alt-ruby32-rubygem-bigdecimal-3.1.3-16.el10.x86_64.rpm
sha:a6f1600f62f9a12dea78ead9d922f4337d4f3bc2daa4f14b777aecf4e269e2e0
-
alt-ruby32-rubygem-bundler-2.4.19-16.el10.noarch.rpm
sha:5d18120a4f296ecad39ec7a5f3c72737024794b57ad558e34f51c56f112a4b4d
-
alt-ruby32-rubygem-io-console-0.6.0-16.el10.x86_64.rpm
sha:94f1453863e83797d6e4c0fc1156c94b9a9d99e3edbd03cc137827cef30f4302
-
alt-ruby32-rubygem-irb-1.6.2-16.el10.noarch.rpm
sha:e2e7c23a598f1b3253a61f8f4f73076f15a24831b318b2c5b3a25b47cbbfb83d
-
alt-ruby32-rubygem-json-2.6.3-16.el10.x86_64.rpm
sha:24ec33b9d7b04ed94d30d0891b7ba19e53061f7b2c0327957353da220df6529c
-
alt-ruby32-rubygem-minitest-5.25.1-16.el10.noarch.rpm
sha:73bd7779c3312ca674426f57af106b5420d249e0e79559265115dd806f720262
-
alt-ruby32-rubygem-power_assert-2.0.3-16.el10.noarch.rpm
sha:c27d9cd02dab7c131b3bb15ca6a67fd10d1064cc29fe560f296212abbf5090cf
-
alt-ruby32-rubygem-psych-5.0.1-16.el10.x86_64.rpm
sha:be0fc3c2b6e58441d52889a25c91e7e220dbdd4a40dccd03f2f7f6197aeadfd3
-
alt-ruby32-rubygem-rake-13.0.6-16.el10.noarch.rpm
sha:7f164e2efaaf1088766967527d3839ea3ae90c4a687e6082aace417c3f5bb647
-
alt-ruby32-rubygem-rbs-2.8.2-16.el10.x86_64.rpm
sha:68c23da0338222d6c448915b8915d658dfa32ac089362161ef135ab201821c7f
-
alt-ruby32-rubygem-rdoc-6.5.1.1-16.el10.noarch.rpm
sha:d69eab39a9b7df0ed91f8d79785305baaced8dfb846ef5f04a87c126adf15049
-
alt-ruby32-rubygem-rexml-3.4.4-16.el10.noarch.rpm
sha:1a34bd2b7d379757ef002e842ebfcbdb4bf5d308ab1addd53bda33647166d320
-
alt-ruby32-rubygem-rss-0.3.1-16.el10.noarch.rpm
sha:27eb65d97640b2ee3ddcadd5615c493c0f4969338ec4b62184c4d58cf13e09dc
-
alt-ruby32-rubygem-test-unit-3.5.7-16.el10.noarch.rpm
sha:7e3c524d675623f7084180ba0234c0de04e3cadaeddcd63b41531fae598443b4
-
alt-ruby32-rubygem-typeprof-0.21.3-16.el10.noarch.rpm
sha:b3ee122259091fa6babe4aed0db5c2495882191191e6d1c7fc96657f9edeef3c
-
alt-ruby32-rubygems-3.4.19-16.el10.noarch.rpm
sha:2eeeab130551277f8e977958b01463eb4a9d89f3ae8fe61d8bd79f06149ae1ba
-
alt-ruby32-rubygems-devel-3.4.19-16.el10.noarch.rpm
sha:20f561c4e53a9343191f5f0a124c62b158e7e010047aeb52f1c227da973a592a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
