Release date:
2026-10-27 12:59:56 UTC
Description:
- CVE-2026-93577, CVE-2026-97229: integer overflow in the size of a compiled
pattern - the nested-repeat expansion guard and the compiled program size
both wrapped int. Patterns whose compiled program exceeds INT_MAX/4 now
raise RegexpError "too big compiled program".
- CVE-2026-110264: overflow of the internal range-repeat and null-check IDs
in a pattern with very many repeats. Such patterns now raise RegexpError
"too many range repeat" / "too many null check".
- All three are reachable whenever a regexp is built from untrusted input
(Regexp.new/compile/union or /#{}/); Regexp.timeout does not protect
against them. Backport of the Ruby 3.3.13 regexp fixes (bugs #13332,
Updated packages:
-
alt-ruby32-3.2.11-16.el8.x86_64.rpm
sha:a91b1747c1310a3cbaca2c32ff1b8f378d718202e42559465430a4b51af063f2
-
alt-ruby32-bundled-gems-3.2.11-16.el8.x86_64.rpm
sha:b42112ce72f736350fd0d285dfebd352a96ee859d43577eb784dc63e73a5d0ff
-
alt-ruby32-default-gems-3.2.11-16.el8.noarch.rpm
sha:1da7ca291655e9f8f20e757226254125df9333ac0aa5d2105f01a9cc8de93fdd
-
alt-ruby32-devel-3.2.11-16.el8.x86_64.rpm
sha:6e55037fc9315c3425b80f4c242de5c19e4747810350fd7aa94d7bd06164743c
-
alt-ruby32-doc-3.2.11-16.el8.noarch.rpm
sha:53f396267354f0ae7dce283841468a82a2f2de322980f978db06cf51ec6b4428
-
alt-ruby32-libs-3.2.11-16.el8.x86_64.rpm
sha:ca79216e5a9f47c720d4e8d8b32380a0248f322e61f85ac4d78cf91b37bd74bc
-
alt-ruby32-rubygem-bigdecimal-3.1.3-16.el8.x86_64.rpm
sha:1142f9b18430145d696ba17ef6fd8a71df5ecf650999d7f97d3c31b0a2d9fa86
-
alt-ruby32-rubygem-bundler-2.4.19-16.el8.noarch.rpm
sha:a7ac45ae439e1e347d38994df3f68789bf34a519b72b9ff5728550469891d437
-
alt-ruby32-rubygem-io-console-0.6.0-16.el8.x86_64.rpm
sha:9363cc4862e5ddcc490af054517b64c1f0d1af1a5f36314a71d464df7309e7ea
-
alt-ruby32-rubygem-irb-1.6.2-16.el8.noarch.rpm
sha:7a92161fdf7dcd03c7684c83e01f4149be91ec698db175b46043cadfeba1e6cd
-
alt-ruby32-rubygem-json-2.6.3-16.el8.x86_64.rpm
sha:9f8aabbb391522afdb67bfb97e436fa5b3ca6cdfbe8d383a07d442133527c3a9
-
alt-ruby32-rubygem-minitest-5.25.1-16.el8.noarch.rpm
sha:35a2862a2d8371c6fc03029883f199c96b9dedb5e5bb6590807eb143673496cb
-
alt-ruby32-rubygem-power_assert-2.0.3-16.el8.noarch.rpm
sha:7e561e105c3e6ed6cef03ac4036a2bc49ae42eb298278565b344762f6fd9a392
-
alt-ruby32-rubygem-psych-5.0.1-16.el8.x86_64.rpm
sha:1d69ffd489ea9b89f3fbe9cf774bcd3e7f64a296d5d10b7f12f309ebebfdb0a2
-
alt-ruby32-rubygem-rake-13.0.6-16.el8.noarch.rpm
sha:845a3b219a9196049a60ef05cf0d85d9c8929aa957d2e24af1aace9d224b2413
-
alt-ruby32-rubygem-rbs-2.8.2-16.el8.x86_64.rpm
sha:9fed09b914c91468dd3ca575f9d73835b64437f362bd3b93f867f5e8c8d09bbb
-
alt-ruby32-rubygem-rdoc-6.5.1.1-16.el8.noarch.rpm
sha:da6c331716eced8ff3e2aaa4861fbac08f87d6d0f33a6a5536142ed3d76f2362
-
alt-ruby32-rubygem-rexml-3.4.4-16.el8.noarch.rpm
sha:7cd8faedce5aceef1094f7ad74d6f046c07adf909960bf74d4029273feae3c5b
-
alt-ruby32-rubygem-rss-0.3.1-16.el8.noarch.rpm
sha:3cdcec6e84507d72e70f546779d4b932bb082341ff168b0d450d6e5d8a5622f8
-
alt-ruby32-rubygem-test-unit-3.5.7-16.el8.noarch.rpm
sha:850d97d617ff3c28fcd6f3191299a6010f59d6d5ee866227757081537c43a413
-
alt-ruby32-rubygem-typeprof-0.21.3-16.el8.noarch.rpm
sha:32f1b2200f495ef1ac4a03fcb66f9818dbe78d0fc6207d9b17f3168c2229dca0
-
alt-ruby32-rubygems-3.4.19-16.el8.noarch.rpm
sha:46a961cf5c9a3c7106ff0e21c19fe46c4a8706c100d5213c5ab23224ccc25063
-
alt-ruby32-rubygems-devel-3.4.19-16.el8.noarch.rpm
sha:55f74275d6b1e5d35afab5ef4820742e892622809f766a021204a0126cbacc75
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
