[CLSA-2026:1792792065] ruby: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-23 21:47:57 UTC
Description:
- CVE-2026-110264: regexp: fix out-of-bounds repeat stack access in Onigmo by rejecting patterns whose range-repeat or null-check count overflows the internal ID type - CVE-2026-93577, CVE-2026-97229: regexp: fix wrapped jump offsets in Onigmo by checking the quantifier expansion size without integer overflow and rejecting compiled programs too big for their offset type
CVEs fixed:
Updated packages:
  • ruby-3.0.7-168.el9_8.tuxcare.els4.aarch64.rpm
    sha:0077a9cb83b393a6060c06c6f3d5b1c20ff3cf9bdb01b40a7a2b1846ecc4853a
  • ruby-3.0.7-168.el9_8.tuxcare.els4.i686.rpm
    sha:4d5f757e070c74bd1070e0fbe69ae4d2546c3c0fe605b80fb921700e33dca658
  • ruby-3.0.7-168.el9_8.tuxcare.els4.x86_64.rpm
    sha:dd1844d42a545c1732a639d6027221e68c5149adc6384ad81bb9ff4261c6c111
  • ruby-default-gems-3.0.7-168.el9_8.tuxcare.els4.noarch.rpm
    sha:bf79147a74408ab59b01955189d9c5211022a7a666999fdfc5d90ebc7a76a227
  • ruby-devel-3.0.7-168.el9_8.tuxcare.els4.aarch64.rpm
    sha:2b5950698c24a6e28cf9866366e9d70929af41c2d077c56f48581c5727a9f179
  • ruby-devel-3.0.7-168.el9_8.tuxcare.els4.i686.rpm
    sha:859cf3771d607b2351f6ceca34d99a65b645b82c421ae8d4ff98b7321168ec1b
  • ruby-devel-3.0.7-168.el9_8.tuxcare.els4.x86_64.rpm
    sha:fb66130382e2ff5c5c22f5ec16e37465775b651e57d4d8b826cb47995617b963
  • ruby-doc-3.0.7-168.el9_8.tuxcare.els4.noarch.rpm
    sha:d8456a5089f8f7a74e203a34bce6345a4f3ad50d072c928b2041007c931b0561
  • ruby-libs-3.0.7-168.el9_8.tuxcare.els4.aarch64.rpm
    sha:b6c5240035841f4e73f644045062fa8697da7bec97da05173b22d5a3d10db6c5
  • ruby-libs-3.0.7-168.el9_8.tuxcare.els4.i686.rpm
    sha:8d42356c637b373092a45729c608ae32e8839b882ea9ec88c6d3dbc09741ecaa
  • ruby-libs-3.0.7-168.el9_8.tuxcare.els4.x86_64.rpm
    sha:9714e0bd4c83b0997c09f387355be20db01bb3a15552c88581734601ac6b28f1
  • rubygem-bigdecimal-3.0.0-168.el9_8.tuxcare.els4.aarch64.rpm
    sha:22149e4cc1b00ff36c0cf1bd3e3f752bb2f1cbe8162e62829793281ffb308518
  • rubygem-bigdecimal-3.0.0-168.el9_8.tuxcare.els4.i686.rpm
    sha:e4fa6652896d397f5acb8cbb88d07ac1b809b2dcc41702138dafafe721b7ff5f
  • rubygem-bigdecimal-3.0.0-168.el9_8.tuxcare.els4.x86_64.rpm
    sha:196503ffd6f7239658de185f3c616e52fc2c879a96a3b060248b43db11f0e9d2
  • rubygem-bundler-2.2.33-168.el9_8.tuxcare.els4.noarch.rpm
    sha:247953fe433c15bc7b2281cd2ed291db4e24dfac5655f70968e74b6d310214d2
  • rubygem-io-console-0.5.7-168.el9_8.tuxcare.els4.aarch64.rpm
    sha:20a7a588e540fcc9e6a39433d8b15a68faa7b26abb2a545a1e8f435ac62ebd70
  • rubygem-io-console-0.5.7-168.el9_8.tuxcare.els4.i686.rpm
    sha:2eedbeccbf3388b19b86477b82d8804044384e6671d226d791bee20dacdb0974
  • rubygem-io-console-0.5.7-168.el9_8.tuxcare.els4.x86_64.rpm
    sha:eddafb6801c7d99bf0ab0c069b00f143c5242a15f0782d090e84149c92871b33
  • rubygem-irb-1.3.5-168.el9_8.tuxcare.els4.noarch.rpm
    sha:f286a499cefafe055ba5a2d539af12b501da05dda7647b080e552afd8e0d04c3
  • rubygem-json-2.5.1-168.el9_8.tuxcare.els4.aarch64.rpm
    sha:c0a17c0d6a3278fba36c4791a196ac1973e762bde491e0be7fbffe02010364af
  • rubygem-json-2.5.1-168.el9_8.tuxcare.els4.i686.rpm
    sha:2da3d80dc56c664c156d790018ee38566260ccf4fc9bb8ec78a684f535f0eb54
  • rubygem-json-2.5.1-168.el9_8.tuxcare.els4.x86_64.rpm
    sha:b30354d538b47cb781f557b211af4ea2f04f438398bc91224fb373d615e9e4c1
  • rubygem-minitest-5.14.2-168.el9_8.tuxcare.els4.noarch.rpm
    sha:35e80b583e7282c1a751cfb65aab93aa5c1bf0832fd389b10d0882d109ed09b5
  • rubygem-power_assert-1.2.1-168.el9_8.tuxcare.els4.noarch.rpm
    sha:723e84602a64e01b0571035cedf7a0df2059df9e72e678555b7cbdccfebc472c
  • rubygem-psych-3.3.2-168.el9_8.tuxcare.els4.aarch64.rpm
    sha:97517aac836244830207cf4db50328dda613a103415898ba8957d45ffc31b0b4
  • rubygem-psych-3.3.2-168.el9_8.tuxcare.els4.i686.rpm
    sha:32de414affe876fc4a6e02fbe6063bd1e3c8aa164eea0f104e17828ebc12f0e0
  • rubygem-psych-3.3.2-168.el9_8.tuxcare.els4.x86_64.rpm
    sha:ca97817abfda0d37b65413e990c65f9a93c662e83d9a7523e863931a0d86211d
  • rubygem-rake-13.0.3-168.el9_8.tuxcare.els4.noarch.rpm
    sha:c7aaa32a866b75ccb0391e55e842f93074dd6b71e95260a3a265c87871289ca6
  • rubygem-rbs-1.4.0-168.el9_8.tuxcare.els4.noarch.rpm
    sha:f4f961da0bc77b92f6319f710704647bc36fbff47c482bf00b6ad0a64d6cfcc7
  • rubygem-rdoc-6.3.4.1-168.el9_8.tuxcare.els4.noarch.rpm
    sha:88b3b176982101e1d2687310ac70084a21134de96ab4ce7f70e38279ce6f0867
  • rubygem-rexml-3.2.5-168.el9_8.tuxcare.els4.noarch.rpm
    sha:191e91d5e4149234567ddd23b137d9026fbc89c414927326000425f90bdf6224
  • rubygem-rss-0.2.9-168.el9_8.tuxcare.els4.noarch.rpm
    sha:c407313c3e6ceec821393a064835b62f91096ec5c7925c3e744811e2498fd6b6
  • rubygem-test-unit-3.3.7-168.el9_8.tuxcare.els4.noarch.rpm
    sha:e357f89f8e923c9753fc58082cb4efd313d65a74a87da1615304a296be19d103
  • rubygem-typeprof-0.15.2-168.el9_8.tuxcare.els4.noarch.rpm
    sha:0f28ddd6a2f147e869be663c88eb5ccde53d7ad70e81638eb24620b87682f78a
  • rubygems-3.2.33-168.el9_8.tuxcare.els4.noarch.rpm
    sha:7f2aae942f017802fd68bc1d8c411368f92f08cc132b706e8c4e122c06a9324d
  • rubygems-devel-3.2.33-168.el9_8.tuxcare.els4.noarch.rpm
    sha:246dfec194378c4f41eb74fd6bbaa9a137deae33a0f8388611ab6fe40ea389ce
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.