[CLSA-2026:1792879613] Fix CVE(s): CVE-2026-110264, CVE-2026-93577, CVE-2026-97229
Type:
security
Severity:
Important
Release date:
2026-10-24 22:07:08 UTC
Description:
* SECURITY UPDATE: Onigmo compiled regexps with more than 32767 range-repeat or null-check ids, wrapping the 16-bit MemNumType operands into negative array subscripts in the matcher - debian/patches/CVE-2026-110264.patch: Onigmo compiled regexps with more than 32767 range-repeat or null-check ids, wrapping the 16-bit MemNumType operands into negative array subscripts in the matcher - CVE-2026-110264 * SECURITY UPDATE: an int overflow in the quantifier expansion size check let Onigmo unroll an enormous bounded repeat - debian/patches/CVE-2026-93577.patch: an int overflow in the quantifier expansion size check let Onigmo unroll an enormous bounded repeat - CVE-2026-93577 * SECURITY UPDATE: a compiled regexp program past INT_MAX wrapped its RelAddrType offsets, making the matcher jump outside the program - CVE-2026-97229
CVEs fixed:
Updated packages:
  • alt-ruby30_3.0.7-177_amd64.deb
    sha:70846feb8d671884575f58930beccef7d0e489f9
  • alt-ruby30-default-gems_3.0.7-177_amd64.deb
    sha:de3fa0dc01ad36a2d869c60de107cb0b0a4e50b1
  • alt-ruby30-devel_3.0.7-177_amd64.deb
    sha:969825692105b103fb5c4844517674f1f8f4530d
  • alt-ruby30-doc_3.0.7-177_amd64.deb
    sha:85a8581fecb4da58e5fd178c6e3dfeac3699ae24
  • alt-ruby30-libs_3.0.7-177_amd64.deb
    sha:58be4aa81625a76a1651202d2b9205e1228cb594
  • alt-ruby30-rubygem-bigdecimal_3.0.0-177_amd64.deb
    sha:22dcf340eec8288647ad3f8626ede30f7438221f
  • alt-ruby30-rubygem-bundler_2.2.33-177_amd64.deb
    sha:4676d8d6e8fd037c94134161d3cd0671c47aeb2e
  • alt-ruby30-rubygem-io-console_0.5.7-177_amd64.deb
    sha:b5edef2fed5fbd034662abdd02b8fff009090048
  • alt-ruby30-rubygem-irb_1.3.5-177_amd64.deb
    sha:8909911b5f2c60c50ecd3ce0758b2a5e821dcbee
  • alt-ruby30-rubygem-json_2.5.1-177_amd64.deb
    sha:089430a1c834f7c47869d2f45f30f407a412d78b
  • alt-ruby30-rubygem-minitest_5.14.2-177_amd64.deb
    sha:55fc19eb9602fe9567f46cf0f9f04ecadfe0ed48
  • alt-ruby30-rubygem-power-assert_1.2.1-177_amd64.deb
    sha:774cb91f74d268b1d3ae0811e6878f0d7108fff0
  • alt-ruby30-rubygem-psych_3.3.2-177_amd64.deb
    sha:6a00eebf154ac389d42bed0816bc4c456c639020
  • alt-ruby30-rubygem-rake_13.0.3-177_amd64.deb
    sha:0b28379a195cabbb001d75869927177fb7adb1e0
  • alt-ruby30-rubygem-rbs_1.4.0-177_amd64.deb
    sha:1e565b04896cdd1195eb22370f223958a6436a3b
  • alt-ruby30-rubygem-rdoc_6.3.4.1-177_amd64.deb
    sha:977aa6d27ae6e7acecba7b1cdfef2418d560b762
  • alt-ruby30-rubygem-rexml_3.2.5-177_amd64.deb
    sha:730f52edc0a07a5381b7a01a07629c4ec5036699
  • alt-ruby30-rubygem-rss_0.2.9-177_amd64.deb
    sha:905bf220f5105c91834b6b1f3b89679ae59c0df6
  • alt-ruby30-rubygem-test-unit_3.3.7-177_amd64.deb
    sha:d45937681192d04103a0437799aff19cf7b515ff
  • alt-ruby30-rubygem-typeprof_0.15.2-177_amd64.deb
    sha:aead5d09093cf572be21a9c579063b0cf58d1989
  • alt-ruby30-rubygems_3.2.33-177_amd64.deb
    sha:0855a52ad3523f5dabe721d5d1ae8887f1c86913
  • alt-ruby30-rubygems-devel_3.2.33-177_amd64.deb
    sha:6b2b2f1d252c8ea09bf79fe11d4dab17382f5848
  • alt-ruby30_3.0.7-177_arm64.deb
    sha:f2a06ecc4e21e58829523c77cf470c10afea1e94
  • alt-ruby30-default-gems_3.0.7-177_arm64.deb
    sha:8c2d4fa68988cd4bd4739854cc478629461ffc01
  • alt-ruby30-devel_3.0.7-177_arm64.deb
    sha:2ecd0b23401d838bad63eebfbf96fb76bf20da5c
  • alt-ruby30-doc_3.0.7-177_arm64.deb
    sha:44f083e0bfdbfcb4cf5c650974eb89246ea6e065
  • alt-ruby30-libs_3.0.7-177_arm64.deb
    sha:2864333bab448453b16825d1f99e9a0cd2c6ddba
  • alt-ruby30-rubygem-bigdecimal_3.0.0-177_arm64.deb
    sha:2feb8dd7c597a2c83a294db2758ebfc8d80d9aa4
  • alt-ruby30-rubygem-bundler_2.2.33-177_arm64.deb
    sha:7cb1d3111b66c09c75eb90b7cb0ddd07ee7ccfa3
  • alt-ruby30-rubygem-io-console_0.5.7-177_arm64.deb
    sha:254b4df040c9d1e58e0bad8539775d77359fb3c4
  • alt-ruby30-rubygem-irb_1.3.5-177_arm64.deb
    sha:ec0ebfc8ac26a38091ce8fb805ce33fda6b0a148
  • alt-ruby30-rubygem-json_2.5.1-177_arm64.deb
    sha:aed0e512a74db6c431d91f6d524730acd31ed52f
  • alt-ruby30-rubygem-minitest_5.14.2-177_arm64.deb
    sha:a7192121f28a9dcf0ee56571068827aa1b5e6b87
  • alt-ruby30-rubygem-power-assert_1.2.1-177_arm64.deb
    sha:f44f6e3b992c0f9f32d71a1a4a6b8730bb832b15
  • alt-ruby30-rubygem-psych_3.3.2-177_arm64.deb
    sha:396a2cb7a4b514c5cdd5af68d396206656dea570
  • alt-ruby30-rubygem-rake_13.0.3-177_arm64.deb
    sha:84531e556112163f53029a6a61e3cb1298403410
  • alt-ruby30-rubygem-rbs_1.4.0-177_arm64.deb
    sha:8e078ecdcefc9773ea5563bfe9dcd3aaca5d5098
  • alt-ruby30-rubygem-rdoc_6.3.4.1-177_arm64.deb
    sha:2d98976351ec7cdf95f304010eba6632fe0822ff
  • alt-ruby30-rubygem-rexml_3.2.5-177_arm64.deb
    sha:3f850f2e0d032028bb3e52b1d21914e98eaa5a7f
  • alt-ruby30-rubygem-rss_0.2.9-177_arm64.deb
    sha:843accd122ce4e195c7737cc7a8331600701c92b
  • alt-ruby30-rubygem-test-unit_3.3.7-177_arm64.deb
    sha:b64513df2c85c5af64545d35c78338dc5f3ecbd0
  • alt-ruby30-rubygem-typeprof_0.15.2-177_arm64.deb
    sha:cdeacfb75407444cdb95a11f27cb37cf368542f7
  • alt-ruby30-rubygems_3.2.33-177_arm64.deb
    sha:f7334a810fcf92ad82973ac1b865d2594e2d581b
  • alt-ruby30-rubygems-devel_3.2.33-177_arm64.deb
    sha:44f31dcdb582233b892c4639a0e17cc117588114
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.