Regexp compilation fixes related to GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264
We have released Ruby 4.0.9, 3.4.12 and 3.3.13. They fix several bugs in Ruby’s regular expression engine (Onigmo) that GitLab found could be used for remote code execution on GitLab servers. GitLab published four CVEs for these issues, and the Ruby releases contain the fixes for the underlying bugs in Ruby. Background GitLab compiles regular expressions supplied by its users, such as patterns in CI configuration, with Regexp.new . GitLab found that specially crafted patterns could corrupt memory while Ruby compiles them, and that this could be turned into remote code execution on GitLab serv…
| CVE | CVE-2026-89078 CVE-2026-93577 CVE-2026-97229 CVE-2026-110264 |
|---|---|
| 情報源 | Ruby News |
| 取得日時 | 2026/10/23 13:54 |
| データ | Markdown JSON |
2026/10/23 12:11、Ruby Newsが「Regexp compilation fixes related to GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264」を公開しました (種別: リリース・告知)。関連する技術: Ruby、GitLab。CVE: CVE-2026-89078、CVE-2026-93577、CVE-2026-97229、CVE-2026-110264。