[CLSA-2026:1792801476] ruby: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-24 00:24:48 UTC
Description:
- CVE-2026-110264: regexp: fix out-of-bounds repeat stack access in Onigmo by rejecting patterns whose range-repeat or null-check count overflows the internal ID type - CVE-2026-93577, CVE-2026-97229: regexp: fix wrapped jump offsets in Onigmo by checking the quantifier expansion size without integer overflow and rejecting compiled programs too big for their offset type
CVEs fixed:
Updated packages:
  • ruby-3.0.7-165.el9_6.tuxcare.els10.aarch64.rpm
    sha:6fcfc535119c34604809fc88a520874cbf19ecf24243e6316363d8734eb33542
  • ruby-3.0.7-165.el9_6.tuxcare.els10.i686.rpm
    sha:701047a362a53af1fda3f5743fe9920675d88ccebff8c987028022a43dbe59e8
  • ruby-3.0.7-165.el9_6.tuxcare.els10.x86_64.rpm
    sha:d16c62cb62f9301166a0e8a589cdf86ee6e9fe486e2b0e63f5ff19bb28051916
  • ruby-default-gems-3.0.7-165.el9_6.tuxcare.els10.noarch.rpm
    sha:b8525ab4deb1f8f0b5da34d8fa09b8df2e59bd1efb3a506099fc6a7fe9fe8c0b
  • ruby-devel-3.0.7-165.el9_6.tuxcare.els10.aarch64.rpm
    sha:0d1ff21030c3a4a994387a0ce8eadafd7f098c92c125181ab6e9b632ac7ab512
  • ruby-devel-3.0.7-165.el9_6.tuxcare.els10.i686.rpm
    sha:2a2b2027d3c0f0c008ff4b78bdc38f2f44d6c3ed67591fde20dc37e1fb94ebc2
  • ruby-devel-3.0.7-165.el9_6.tuxcare.els10.x86_64.rpm
    sha:99b882ba756514d82ea3faab464ff1c983e9093ee31a03b9d8bfc05a112f5741
  • ruby-doc-3.0.7-165.el9_6.tuxcare.els10.noarch.rpm
    sha:db3eeb9164acc521762c2642b30fc3378d5591d59f25edacadb73100a51b4393
  • ruby-libs-3.0.7-165.el9_6.tuxcare.els10.aarch64.rpm
    sha:3f5c3563f84228a6d6bfc339a739b27c7e65f4aa5d9ec5263b84c34b45a6d6ae
  • ruby-libs-3.0.7-165.el9_6.tuxcare.els10.i686.rpm
    sha:95a525628e3544e328f79c371ef04eda33a73d76d35322da87b3314bd9f19037
  • ruby-libs-3.0.7-165.el9_6.tuxcare.els10.x86_64.rpm
    sha:47c514de2fceeb47d55b89fa8146f9c8d5e5582553669018c01fb0f56fcef91b
  • rubygem-bigdecimal-3.0.0-165.el9_6.tuxcare.els10.aarch64.rpm
    sha:2d0035d5606cc6aa56915b3548e3d10c8d9bddfc3a25ebb6ac96d07f8a38731a
  • rubygem-bigdecimal-3.0.0-165.el9_6.tuxcare.els10.i686.rpm
    sha:c2f10697b95cdb88a0f3ae6d7f5a44d12120fe640890d55dd64f5cc0cc5acbf3
  • rubygem-bigdecimal-3.0.0-165.el9_6.tuxcare.els10.x86_64.rpm
    sha:588bf9c433edf7238029ef3cfb1585471911e4d066a2be87442e71d3cfe7ecd0
  • rubygem-bundler-2.2.33-165.el9_6.tuxcare.els10.noarch.rpm
    sha:bb86658165252bcd52afbec389bf4b4462f1445c91d895d040ee8e227adf167e
  • rubygem-io-console-0.5.7-165.el9_6.tuxcare.els10.aarch64.rpm
    sha:dfa95b571bc4786985a37fceda0492907b7785d152f79da74ba53bbe3617d7af
  • rubygem-io-console-0.5.7-165.el9_6.tuxcare.els10.i686.rpm
    sha:a059afded8705ee809e6f8dbc414d35a3fa61da5451a59c712a88fc3ae55d1b9
  • rubygem-io-console-0.5.7-165.el9_6.tuxcare.els10.x86_64.rpm
    sha:3f49ae9ac5bc211c4028112d92b836ea8e04ca344d6afcc2ecec20c5962dcf38
  • rubygem-irb-1.3.5-165.el9_6.tuxcare.els10.noarch.rpm
    sha:0946ba7617a5c986ae2fa973dd8893b595ca7261466a589bb9843478d0e70c9e
  • rubygem-json-2.5.1-165.el9_6.tuxcare.els10.aarch64.rpm
    sha:ac13ca3bdc0368b5451a1c1ea088fc6ea2508654e97222b56ab6b07cd9ac49bb
  • rubygem-json-2.5.1-165.el9_6.tuxcare.els10.i686.rpm
    sha:d15a63e36d5217edc9bb1d07c3f4c282fbc546e36c6b6e9ef250ebf7537916d8
  • rubygem-json-2.5.1-165.el9_6.tuxcare.els10.x86_64.rpm
    sha:2f58a28ee7d1c34c7ddbc25c5e1f34cf2b48540578632757cc9179d799c67954
  • rubygem-minitest-5.14.2-165.el9_6.tuxcare.els10.noarch.rpm
    sha:789b26fbc0e25b6cbe12df1a4ec504772498a00274dfc8bf4359c0b1de900dfc
  • rubygem-power_assert-1.2.1-165.el9_6.tuxcare.els10.noarch.rpm
    sha:1f5881a07252138305d6fbfe36e7174067d256934fc825af22c41b71473bba1d
  • rubygem-psych-3.3.2-165.el9_6.tuxcare.els10.aarch64.rpm
    sha:7ab35dd4f011326c17ad6418b463b72bc2ae468e2ed41fc9336ff21c681ecb99
  • rubygem-psych-3.3.2-165.el9_6.tuxcare.els10.i686.rpm
    sha:67d305aa332a471603091d52d3a0797437ce5caf1bb926801b3c4d7687618951
  • rubygem-psych-3.3.2-165.el9_6.tuxcare.els10.x86_64.rpm
    sha:59d079401b5358c46e6d53236da585b5d51dcfdf9eacf7e8055999f214669896
  • rubygem-rake-13.0.3-165.el9_6.tuxcare.els10.noarch.rpm
    sha:e1529b7b4624078732127ee8224e28619772cc7380b93a70cc3eaac2af4ecff2
  • rubygem-rbs-1.4.0-165.el9_6.tuxcare.els10.noarch.rpm
    sha:3d9ca9397a41e22ec2fb8cb48610ba36d90c36dfc9636eca56c5ee28c8be797f
  • rubygem-rdoc-6.3.4.1-165.el9_6.tuxcare.els10.noarch.rpm
    sha:678608f0f3e566320affc997724939a785efbdfa3e48436daae3f8c57d358915
  • rubygem-rexml-3.2.5-165.el9_6.tuxcare.els10.noarch.rpm
    sha:b6e363dcd5a82196af919adf5f13c43ac2c4b7e159646acd70719614940cf747
  • rubygem-rss-0.2.9-165.el9_6.tuxcare.els10.noarch.rpm
    sha:b2152e5393bdf626fc59b950e412e226ce7b350a1f92f32f503d2f319db0570f
  • rubygem-test-unit-3.3.7-165.el9_6.tuxcare.els10.noarch.rpm
    sha:19ba0b5f4cca9d9cbed4178dce0899ab190933702820ec7aaf572f90f3d17057
  • rubygem-typeprof-0.15.2-165.el9_6.tuxcare.els10.noarch.rpm
    sha:760d774d1296fbf7fc18edbc5d5f8e9c22b63944ff304ae5abd083b32bbcffdb
  • rubygems-3.2.33-165.el9_6.tuxcare.els10.noarch.rpm
    sha:10b4af532b716fb5e9f819af55e076e475dd98ba3bc50c7398fc14a3b7f0319a
  • rubygems-devel-3.2.33-165.el9_6.tuxcare.els10.noarch.rpm
    sha:3836d4d51a99ea4aa800daf03adbd844a0116f4145044b8c924fb6fd504ded3e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.