CLSA-2026-1792795468
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792795468.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1792795468
- Upstream
- Published
- 2026-10-23T22:44:39Z
- Modified
- 2026-10-26T09:32:03Z
- Summary
- Fix CVE(s): CVE-2026-110264, CVE-2026-93577, CVE-2026-97229
- Details
-
- SECURITY UPDATE: out-of-bounds repeat stack access in huge regexps
- debian/patches/CVE-2026-110264.patch: reject patterns whose range repeat or null check IDs overflow in regcomp.c, regerror.c.
- CVE-2026-110264
- SECURITY UPDATE: wrapped jump offsets in the regexp compiler
- debian/patches/CVE-2026-93577-CVE-2026-97229.patch: check the quantifier expansion size without int overflow and reject programs too big for their offset type in regcomp.c, regint.h, regerror.c.
- CVE-2026-93577
- CVE-2026-97229
- Fix build-time test failures:
- debian/patches/exclude-tests-failing-on-build-system.patch: skip the DTrace probe and permission tests, which fail when the test suite runs as root, the TLS tests whose test certificates expired and the Asia/Singapore tests that do not match the installed tzdata
- SECURITY UPDATE: out-of-bounds repeat stack access in huge regexps
- References
Affected packages
TuxCare:Ubuntu:16.04 / libruby2.3
Package
- Name
- libruby2.3
- Purl
- pkg:deb/tuxcare/libruby2.3?distro=ubuntu-16.04
TuxCare:Ubuntu:16.04 / ruby2.3
Package
- Name
- ruby2.3
- Purl
- pkg:deb/tuxcare/ruby2.3?distro=ubuntu-16.04
TuxCare:Ubuntu:16.04 / ruby2.3-dev
Package
- Name
- ruby2.3-dev
- Purl
- pkg:deb/tuxcare/ruby2.3-dev?distro=ubuntu-16.04
TuxCare:Ubuntu:16.04 / ruby2.3-doc
Package
- Name
- ruby2.3-doc
- Purl
- pkg:deb/tuxcare/ruby2.3-doc?distro=ubuntu-16.04