[CLSA-2026:1792881467] Fix CVE(s): CVE-2026-110264, CVE-2026-93577, CVE-2026-97229
Type:
security
Severity:
Important
Release date:
2026-10-24 22:40:32 UTC
Description:
* SECURITY UPDATE: Onigmo compiled regexps with more than 32767 range-repeat or null-check ids, wrapping the 16-bit MemNumType operands into negative array subscripts in the matcher - debian/patches/CVE-2026-110264.patch: Onigmo compiled regexps with more than 32767 range-repeat or null-check ids, wrapping the 16-bit MemNumType operands into negative array subscripts in the matcher - CVE-2026-110264 * SECURITY UPDATE: an int overflow in the quantifier expansion size check let Onigmo unroll an enormous bounded repeat - debian/patches/CVE-2026-93577.patch: an int overflow in the quantifier expansion size check let Onigmo unroll an enormous bounded repeat - CVE-2026-93577 * SECURITY UPDATE: a compiled regexp program past INT_MAX wrapped its RelAddrType offsets, making the matcher jump outside the program - CVE-2026-97229
CVEs fixed:
Updated packages:
  • alt-ruby30_3.0.7-177_amd64.deb
    sha:f67a3763284f58cdc9251909ebe4acfbc738cb0c
  • alt-ruby30-default-gems_3.0.7-177_amd64.deb
    sha:de3fa0dc01ad36a2d869c60de107cb0b0a4e50b1
  • alt-ruby30-devel_3.0.7-177_amd64.deb
    sha:46918419c1405376311b6892c6d5ecf457b0c9f3
  • alt-ruby30-doc_3.0.7-177_amd64.deb
    sha:6ac8edf5b4fc418a60181388c73488ea8dbf730a
  • alt-ruby30-libs_3.0.7-177_amd64.deb
    sha:e3f42601f576d872bdf8cbb7df53d023d2781170
  • alt-ruby30-rubygem-bigdecimal_3.0.0-177_amd64.deb
    sha:0e435f1f240b7ac0ff60e8cb3f484713e83f96ac
  • alt-ruby30-rubygem-bundler_2.2.33-177_amd64.deb
    sha:4676d8d6e8fd037c94134161d3cd0671c47aeb2e
  • alt-ruby30-rubygem-io-console_0.5.7-177_amd64.deb
    sha:d777b828ffd154bb352ab696b30306710a124502
  • alt-ruby30-rubygem-irb_1.3.5-177_amd64.deb
    sha:8909911b5f2c60c50ecd3ce0758b2a5e821dcbee
  • alt-ruby30-rubygem-json_2.5.1-177_amd64.deb
    sha:0e2c166b4c3336322e5e5cf667b5cec096753018
  • alt-ruby30-rubygem-minitest_5.14.2-177_amd64.deb
    sha:55fc19eb9602fe9567f46cf0f9f04ecadfe0ed48
  • alt-ruby30-rubygem-power-assert_1.2.1-177_amd64.deb
    sha:774cb91f74d268b1d3ae0811e6878f0d7108fff0
  • alt-ruby30-rubygem-psych_3.3.2-177_amd64.deb
    sha:681817201010fdc90f129a1ab10dca3c8d68426d
  • alt-ruby30-rubygem-rake_13.0.3-177_amd64.deb
    sha:0b28379a195cabbb001d75869927177fb7adb1e0
  • alt-ruby30-rubygem-rbs_1.4.0-177_amd64.deb
    sha:1e565b04896cdd1195eb22370f223958a6436a3b
  • alt-ruby30-rubygem-rdoc_6.3.4.1-177_amd64.deb
    sha:977aa6d27ae6e7acecba7b1cdfef2418d560b762
  • alt-ruby30-rubygem-rexml_3.2.5-177_amd64.deb
    sha:730f52edc0a07a5381b7a01a07629c4ec5036699
  • alt-ruby30-rubygem-rss_0.2.9-177_amd64.deb
    sha:905bf220f5105c91834b6b1f3b89679ae59c0df6
  • alt-ruby30-rubygem-test-unit_3.3.7-177_amd64.deb
    sha:d45937681192d04103a0437799aff19cf7b515ff
  • alt-ruby30-rubygem-typeprof_0.15.2-177_amd64.deb
    sha:aead5d09093cf572be21a9c579063b0cf58d1989
  • alt-ruby30-rubygems_3.2.33-177_amd64.deb
    sha:0855a52ad3523f5dabe721d5d1ae8887f1c86913
  • alt-ruby30-rubygems-devel_3.2.33-177_amd64.deb
    sha:6b2b2f1d252c8ea09bf79fe11d4dab17382f5848
  • alt-ruby30_3.0.7-177_arm64.deb
    sha:5625bed7914a07e0eb7156c28cff483f2b4f35da
  • alt-ruby30-default-gems_3.0.7-177_arm64.deb
    sha:8c2d4fa68988cd4bd4739854cc478629461ffc01
  • alt-ruby30-devel_3.0.7-177_arm64.deb
    sha:663633bbb7ceb73145b68a75c327bd0ae22866d5
  • alt-ruby30-doc_3.0.7-177_arm64.deb
    sha:ead27e9cd1a79b9281bca5788faa9d95a2c7ab1e
  • alt-ruby30-libs_3.0.7-177_arm64.deb
    sha:534372ba7089e6b4f0fec97dc44370a5d54a3f3e
  • alt-ruby30-rubygem-bigdecimal_3.0.0-177_arm64.deb
    sha:c84a652e432e04d1329e361122522c7264905440
  • alt-ruby30-rubygem-bundler_2.2.33-177_arm64.deb
    sha:7cb1d3111b66c09c75eb90b7cb0ddd07ee7ccfa3
  • alt-ruby30-rubygem-io-console_0.5.7-177_arm64.deb
    sha:70570783177928b309641f1aa044631015614e68
  • alt-ruby30-rubygem-irb_1.3.5-177_arm64.deb
    sha:ec0ebfc8ac26a38091ce8fb805ce33fda6b0a148
  • alt-ruby30-rubygem-json_2.5.1-177_arm64.deb
    sha:4eb838e0d8bf76b850655aca0a77d6593de5790b
  • alt-ruby30-rubygem-minitest_5.14.2-177_arm64.deb
    sha:a7192121f28a9dcf0ee56571068827aa1b5e6b87
  • alt-ruby30-rubygem-power-assert_1.2.1-177_arm64.deb
    sha:f44f6e3b992c0f9f32d71a1a4a6b8730bb832b15
  • alt-ruby30-rubygem-psych_3.3.2-177_arm64.deb
    sha:5ea2de6afe1d2e8106e197137e532f75c711e8cd
  • alt-ruby30-rubygem-rake_13.0.3-177_arm64.deb
    sha:84531e556112163f53029a6a61e3cb1298403410
  • alt-ruby30-rubygem-rbs_1.4.0-177_arm64.deb
    sha:8e078ecdcefc9773ea5563bfe9dcd3aaca5d5098
  • alt-ruby30-rubygem-rdoc_6.3.4.1-177_arm64.deb
    sha:2d98976351ec7cdf95f304010eba6632fe0822ff
  • alt-ruby30-rubygem-rexml_3.2.5-177_arm64.deb
    sha:3f850f2e0d032028bb3e52b1d21914e98eaa5a7f
  • alt-ruby30-rubygem-rss_0.2.9-177_arm64.deb
    sha:843accd122ce4e195c7737cc7a8331600701c92b
  • alt-ruby30-rubygem-test-unit_3.3.7-177_arm64.deb
    sha:b64513df2c85c5af64545d35c78338dc5f3ecbd0
  • alt-ruby30-rubygem-typeprof_0.15.2-177_arm64.deb
    sha:cdeacfb75407444cdb95a11f27cb37cf368542f7
  • alt-ruby30-rubygems_3.2.33-177_arm64.deb
    sha:f7334a810fcf92ad82973ac1b865d2594e2d581b
  • alt-ruby30-rubygems-devel_3.2.33-177_arm64.deb
    sha:44f31dcdb582233b892c4639a0e17cc117588114
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.