[CLSA-2026:1792880186] Fix CVE(s): CVE-2026-110264, CVE-2026-93577, CVE-2026-97229
Type:
security
Severity:
Important
Release date:
2026-10-24 22:16:39 UTC
Description:
* SECURITY UPDATE: Onigmo compiled regexps with more than 32767 range-repeat or null-check ids, wrapping the 16-bit MemNumType operands into negative array subscripts in the matcher - debian/patches/CVE-2026-110264.patch: Onigmo compiled regexps with more than 32767 range-repeat or null-check ids, wrapping the 16-bit MemNumType operands into negative array subscripts in the matcher - CVE-2026-110264 * SECURITY UPDATE: an int overflow in the quantifier expansion size check let Onigmo unroll an enormous bounded repeat - debian/patches/CVE-2026-93577.patch: an int overflow in the quantifier expansion size check let Onigmo unroll an enormous bounded repeat - CVE-2026-93577 * SECURITY UPDATE: a compiled regexp program past INT_MAX wrapped its RelAddrType offsets, making the matcher jump outside the program - CVE-2026-97229
CVEs fixed:
Updated packages:
  • alt-ruby30_3.0.7-177_amd64.deb
    sha:b7314c2c5e253dbcefb01d90690a7c9f1dbcf7a9
  • alt-ruby30-default-gems_3.0.7-177_amd64.deb
    sha:de3fa0dc01ad36a2d869c60de107cb0b0a4e50b1
  • alt-ruby30-devel_3.0.7-177_amd64.deb
    sha:7c553c021f1cf60acb33e78ddf7c36c4ecb0cbe0
  • alt-ruby30-doc_3.0.7-177_amd64.deb
    sha:85a8581fecb4da58e5fd178c6e3dfeac3699ae24
  • alt-ruby30-libs_3.0.7-177_amd64.deb
    sha:73cd6fee0c55d83b58fc696d25d94d6536720d59
  • alt-ruby30-rubygem-bigdecimal_3.0.0-177_amd64.deb
    sha:99f9ed8db2e7241decd64c274f8a56c599444788
  • alt-ruby30-rubygem-bundler_2.2.33-177_amd64.deb
    sha:4676d8d6e8fd037c94134161d3cd0671c47aeb2e
  • alt-ruby30-rubygem-io-console_0.5.7-177_amd64.deb
    sha:989a92d7d4d9df84bc9d223729e6f92aff333434
  • alt-ruby30-rubygem-irb_1.3.5-177_amd64.deb
    sha:8909911b5f2c60c50ecd3ce0758b2a5e821dcbee
  • alt-ruby30-rubygem-json_2.5.1-177_amd64.deb
    sha:64772abe4fc4c2e9e40684e2d442835fee91d91e
  • alt-ruby30-rubygem-minitest_5.14.2-177_amd64.deb
    sha:55fc19eb9602fe9567f46cf0f9f04ecadfe0ed48
  • alt-ruby30-rubygem-power-assert_1.2.1-177_amd64.deb
    sha:774cb91f74d268b1d3ae0811e6878f0d7108fff0
  • alt-ruby30-rubygem-psych_3.3.2-177_amd64.deb
    sha:75c910e7eb440bc726cb81bd3b1ab9dd988a0d52
  • alt-ruby30-rubygem-rake_13.0.3-177_amd64.deb
    sha:0b28379a195cabbb001d75869927177fb7adb1e0
  • alt-ruby30-rubygem-rbs_1.4.0-177_amd64.deb
    sha:1e565b04896cdd1195eb22370f223958a6436a3b
  • alt-ruby30-rubygem-rdoc_6.3.4.1-177_amd64.deb
    sha:977aa6d27ae6e7acecba7b1cdfef2418d560b762
  • alt-ruby30-rubygem-rexml_3.2.5-177_amd64.deb
    sha:730f52edc0a07a5381b7a01a07629c4ec5036699
  • alt-ruby30-rubygem-rss_0.2.9-177_amd64.deb
    sha:905bf220f5105c91834b6b1f3b89679ae59c0df6
  • alt-ruby30-rubygem-test-unit_3.3.7-177_amd64.deb
    sha:d45937681192d04103a0437799aff19cf7b515ff
  • alt-ruby30-rubygem-typeprof_0.15.2-177_amd64.deb
    sha:aead5d09093cf572be21a9c579063b0cf58d1989
  • alt-ruby30-rubygems_3.2.33-177_amd64.deb
    sha:0855a52ad3523f5dabe721d5d1ae8887f1c86913
  • alt-ruby30-rubygems-devel_3.2.33-177_amd64.deb
    sha:6b2b2f1d252c8ea09bf79fe11d4dab17382f5848
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.