[CLSA-2026:1792795786] Fix CVE(s): CVE-2026-110264, CVE-2026-93577, CVE-2026-97229

Type:

security

Severity:

Critical

Release date:

2026-10-23 22:49:56 UTC

Description:

   * SECURITY UPDATE: out-of-bounds repeat stack access in Onigmo
     - debian/patches/CVE-2026-110264.patch: reject patterns whose
       range-repeat or null-check count overflows the internal ID type in
       include/ruby/onigmo.h, regcomp.c, regerror.c.
     - CVE-2026-110264
   * SECURITY UPDATE: wrapped jump offsets in Onigmo
     - debian/patches/CVE-2026-93577-CVE-2026-97229.patch: check the
       quantifier expansion size without integer overflow and reject compiled
       programs too big for their offset type in regcomp.c, regint.h.
     - CVE-2026-93577
     - CVE-2026-97229

CVEs fixed:

Updated packages:

libruby2.7_2.7.0-5ubuntu1.18+tuxcare.els1_amd64.deb
sha:c3ae59f29fee7d7ddfda35d03189f89a4f70bc37
ruby2.7_2.7.0-5ubuntu1.18+tuxcare.els1_amd64.deb
sha:3338f962078a962548664043dd507a984f943b94
ruby2.7-dev_2.7.0-5ubuntu1.18+tuxcare.els1_amd64.deb
sha:6559249d679f3cf747e2165e4f22cbf63baf71c6
ruby2.7-doc_2.7.0-5ubuntu1.18+tuxcare.els1_all.deb
sha:54b46c8422a7735b91ddac729d3c48ef79cc117f
libruby2.7_2.7.0-5ubuntu1.18+tuxcare.els1_arm64.deb
sha:ae7858bd776c12fcd9a1a559efc49770d33fd2e9
ruby2.7_2.7.0-5ubuntu1.18+tuxcare.els1_arm64.deb
sha:1bc93bed9fc150e8f093ce2791b2e7bf67bab1b2
ruby2.7-dev_2.7.0-5ubuntu1.18+tuxcare.els1_arm64.deb
sha:262a262f352bd758a2e813bbb9fd93eac8e89cb3

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.