ruby: integer overflow issue in regular expression compiler

A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, an integer overflow in the size of the compiled pattern can occur. This integer overflow causes memory...

ruby: integer overflow issue in regular expression compiler

A flaw was found in Ruby. When compiling a specially crafted regular expression containing an excessive number of repeats with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, an integer overflow of internal IDs can occur. This integer overflow...

ruby: integer overflow issue in regular expression compiler

A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, an integer overflow in the size of the compiled pattern can occur. This integer overflow causes memory...

ruby: integer overflow issue in CI/CD regular expression compiler

A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, an integer overflow in the size of the compiled pattern can occur. This integer overflow causes memory...

CLSA-2026-1792801476 ruby: Fix of 3 CVEs

CVE-2026-110264: regexp: fix out-of-bounds repeat stack access in Onigmo by rejecting patterns whose range-repeat or null-check count overflows the internal ID type - CVE-2026-93577, CVE-2026-97229: regexp: fix wrapped jump offsets in Onigmo by checking the quantifier expansion size without...

CLSA-2026-1792800480 ruby: Fix of 3 CVEs

CVE-2026-110264: regexp: fix out-of-bounds repeat stack access in Onigmo by rejecting patterns whose range-repeat or null-check count overflows the internal ID type - CVE-2026-93577, CVE-2026-97229: regexp: fix wrapped jump offsets in Onigmo by checking the quantifier expansion size without...

PT-2026-122595

Name of the Vulnerable Software and Affected Versions open62541 versions 1.5.0 through 1.5.6 Description An integer overflow exists in the UA DataType fromStructureDescription function that affects the 16-bit memSize field when processing large custom structure definitions. A malicious OPC UA...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143721)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143721 advisory. phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF...

Rocky Linux 9 [CIQ] Security Update: expat / expat-debuginfo / expat-debugsource / expat-devel Multiple Vulnerabilities (crlsa-2026_88247)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202688247 advisory. expat: expat: Denial of Service via integer overflow in expatrealloc CVE-2026-102633 expat: expat: Information disclosure via heap buffer over-read in...

AlmaLinux 9.6 [TuxCare] Security Update: tigervnc / tigervnc-icons / tigervnc-license / tigervnc-selinux / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792819460)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792819460 advisory. - xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow CVE-2026-93517 -...

Linux Distros Unpatched Vulnerability : CVE-2026-116014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - open62541 1.5.0 before 1.5.7 contains an integer overflow in UADataTypefromStructureDescription that wraps the 16-bit memSize field for large custom structure...

Linux Distros Unpatched Vulnerability : CVE-2026-110264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143714)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143714 advisory. The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to...

Linux Distros Unpatched Vulnerability : CVE-2026-93577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain...

Rocky Linux 9.6 [TuxCare] Security Update: tigervnc / tigervnc-icons / tigervnc-license / tigervnc-selinux / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792819460)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792819460 advisory. - xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow CVE-2026-93517 -...

Medium: nss

Issue Overview: Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152. CVE-2026-12318 Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153...

GitLab CE/EE 19.5.0 Regular Expression Integer Overflow

GitLab CE/EE versions before 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3, and 19.5.1 contain a regular expression compiler integer overflow that may allow unauthenticated arbitrary code execution. This proof of concept generates crafted Org-mode content and triggers the affected render path...

GitLab 19.5.0 Integer Overflow

GitLab CE/EE versions before 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3, and 19.5.1 contain an integer overflow in regular expression compilation. The proof of concept demonstrates the underlying Onigmo repeat-ID overflow. https://packetstorm.news/download/237411...

Rocky Linux 10.2 [CIQ] Security Update: expat / expat-debuginfo / expat-debugsource / expat-devel Multiple Vulnerabilities (crlsa-2026_88248)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202688248 advisory. expat: expat: Denial of Service via integer overflow in expatrealloc CVE-2026-102633 expat: expat: Information disclosure via heap buffer over-read in...

SUSE CVE-2026-98900

In the Linux kernel, the following vulnerability has been resolved: xen/gntalloc: validate grant count before allocation gntallocioctlalloc allocates the grant-id array before checking whether the requested count fits within the global grant limit. Counts above that limit cannot succeed, so rejec...