CLSA-2026-1792795609
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1792795609.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1792795609
- Upstream
- Published
- 2026-10-23T22:47:00Z
- Modified
- 2026-10-26T09:32:04Z
- Summary
- Fix CVE(s): CVE-2026-110264, CVE-2026-93577, CVE-2026-97229
- Details
-
- SECURITY UPDATE: out-of-bounds repeat stack access in regexps
- debian/patches/CVE-2026-110264.patch: reject patterns whose range-repeat or null-check count overflows the ID type in regcomp.c
- CVE-2026-110264
- SECURITY UPDATE: wrapped jump offsets in compiled regexps
- debian/patches/CVE-2026-93577-CVE-2026-97229.patch: check quantifier expansion without int overflow and cap program size in regcomp.c
- CVE-2026-93577
- CVE-2026-97229
- Fix build-time test failures:
- debian/tests/excludes: skip the DTrace probe and two permission tests, which fail when the test suite runs as root, the TLS tests whose test certificates expired and the EADDRINUSE local bind tests
- SECURITY UPDATE: out-of-bounds repeat stack access in regexps
- References
Affected packages
TuxCare:Ubuntu:18.04 / libruby2.5
Package
- Name
- libruby2.5
- Purl
- pkg:deb/tuxcare/libruby2.5?distro=ubuntu-18.04
TuxCare:Ubuntu:18.04 / ruby2.5
Package
- Name
- ruby2.5
- Purl
- pkg:deb/tuxcare/ruby2.5?distro=ubuntu-18.04
TuxCare:Ubuntu:18.04 / ruby2.5-dev
Package
- Name
- ruby2.5-dev
- Purl
- pkg:deb/tuxcare/ruby2.5-dev?distro=ubuntu-18.04