Release date:
2026-10-27 12:56:41 UTC
Description:
- CVE-2026-93577, CVE-2026-97229: integer overflow in the size of a compiled
pattern - the nested-repeat expansion guard and the compiled program size
both wrapped int. Patterns whose compiled program exceeds INT_MAX/4 now
raise RegexpError "too big compiled program".
- CVE-2026-110264: overflow of the internal range-repeat and null-check IDs
in a pattern with very many repeats. Such patterns now raise RegexpError
"too many range repeat" / "too many null check".
- All three are reachable whenever a regexp is built from untrusted input
(Regexp.new/compile/union or /#{}/); Regexp.timeout does not protect
against them. Backport of the Ruby 3.3.13 regexp fixes (bugs #13332,
Updated packages:
-
alt-ruby32-3.2.11-16.el7.x86_64.rpm
sha:84bee3609f58fbcd53b1ec0951045949bb3bcb035d450e080bddc770dda7cb0c
-
alt-ruby32-bundled-gems-3.2.11-16.el7.x86_64.rpm
sha:07142cbab78199a825bd21626c6fdc12dd7b101864ebd470858597eab9a902a3
-
alt-ruby32-default-gems-3.2.11-16.el7.noarch.rpm
sha:6c798b765e9acc6dcde8fc89952004edffafb7513494d6c5d047b6a90885a545
-
alt-ruby32-devel-3.2.11-16.el7.x86_64.rpm
sha:9a0f6951d75821176948b509953928e80c82e399892214c6582819f398335007
-
alt-ruby32-doc-3.2.11-16.el7.noarch.rpm
sha:9712737c6636a648a4b27cc9854bc0616b41e59840ac0ab0fc0ae63fec5989f2
-
alt-ruby32-libs-3.2.11-16.el7.x86_64.rpm
sha:6bcd464a0ff888b9950fb041f065af0a8887203e30402d1a64396c1030e299ca
-
alt-ruby32-rubygem-bigdecimal-3.1.3-16.el7.x86_64.rpm
sha:f600b355f171076d204ce75b0d9c4d75115a5215f2a5629bff34a8a3b785fa8d
-
alt-ruby32-rubygem-bundler-2.4.19-16.el7.noarch.rpm
sha:1f8ec5ceceb64bec47bb57ba0e06c10be48b6c8edda19f67068ca474b95e6b0e
-
alt-ruby32-rubygem-io-console-0.6.0-16.el7.x86_64.rpm
sha:53ce3c7f13400d50701c9668e14e253d0b5647b9f37be6abee5dfa3eaa63c35b
-
alt-ruby32-rubygem-irb-1.6.2-16.el7.noarch.rpm
sha:eb3a02afc304fb926438263dc0192d6fd701f774ebdbbb1ce42596aa80a69cfa
-
alt-ruby32-rubygem-json-2.6.3-16.el7.x86_64.rpm
sha:a861befdfa134c0ccf8684c9377581a99c330d48626174d0a154082093939728
-
alt-ruby32-rubygem-minitest-5.25.1-16.el7.noarch.rpm
sha:82dcc3003944329dde7116ce013cfaef3f370db3dc9d14fcbc0e8ad84533f00f
-
alt-ruby32-rubygem-power_assert-2.0.3-16.el7.noarch.rpm
sha:cf2275cdf1c10fe97d2e6521d6dd01c58f24b9bd40c7eda246a46022997bfee7
-
alt-ruby32-rubygem-psych-5.0.1-16.el7.x86_64.rpm
sha:fed0ab26d3c185b84c1368a70fb95dccd6b61b6db9e820a394821d2cb31a637a
-
alt-ruby32-rubygem-rake-13.0.6-16.el7.noarch.rpm
sha:4b1da3e9b5a7ffe684f74f15fff8bddb7effb126f9995c36c57e7770660949fa
-
alt-ruby32-rubygem-rbs-2.8.2-16.el7.x86_64.rpm
sha:5a7bde15a1ddda7b711662685d90df6fa6cb78f952ae4e902efa9b9ff3949529
-
alt-ruby32-rubygem-rdoc-6.5.1.1-16.el7.noarch.rpm
sha:13b9337998cc4dad90be79c8fa24ca3c3c24d4731bf640a76a51cbe0e5f4502b
-
alt-ruby32-rubygem-rexml-3.4.4-16.el7.noarch.rpm
sha:421b8746ad4eb317160bcb27781f8c43029b70134ed099509edf5733c2dde067
-
alt-ruby32-rubygem-rss-0.3.1-16.el7.noarch.rpm
sha:46eeb9e954012ff22c928d5dfe0c43ad1993e5021f18bcc8284915e816e8acad
-
alt-ruby32-rubygem-test-unit-3.5.7-16.el7.noarch.rpm
sha:8977891427d1bbc9043a64d4c3e8d9c18af5f83728f98bbc18b15fabfcb34b5a
-
alt-ruby32-rubygem-typeprof-0.21.3-16.el7.noarch.rpm
sha:ff4ff7c2894fa4003e7a921d3559547710ae94d0b2745f2f5618f6019f8b4725
-
alt-ruby32-rubygems-3.4.19-16.el7.noarch.rpm
sha:ab5c0f4f4bd8cb9eb9d922982cc4dcc07d421d226cb3a3f3ee7d48164cb5fd4b
-
alt-ruby32-rubygems-devel-3.4.19-16.el7.noarch.rpm
sha:ddf0108b69bd63800d18c561a8998eb149a9f95c7c518e86b47ded0756817f2b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
