CLSA-2026-1792795786
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1792795786.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1792795786
- Upstream
- Published
- 2026-10-23T22:49:56Z
- Modified
- 2026-10-26T09:32:05Z
- Summary
- Fix CVE(s): CVE-2026-110264, CVE-2026-93577, CVE-2026-97229
- Details
-
- SECURITY UPDATE: out-of-bounds repeat stack access in Onigmo
- debian/patches/CVE-2026-110264.patch: reject patterns whose range-repeat or null-check count overflows the internal ID type in include/ruby/onigmo.h, regcomp.c, regerror.c.
- CVE-2026-110264
- SECURITY UPDATE: wrapped jump offsets in Onigmo
- debian/patches/CVE-2026-93577-CVE-2026-97229.patch: check the quantifier expansion size without integer overflow and reject compiled programs too big for their offset type in regcomp.c, regint.h.
- CVE-2026-93577
- CVE-2026-97229
- SECURITY UPDATE: out-of-bounds repeat stack access in Onigmo
- References
Affected packages
TuxCare:Ubuntu:20.04 / libruby2.7
Package
- Name
- libruby2.7
- Purl
- pkg:deb/tuxcare/libruby2.7?distro=ubuntu-20.04
TuxCare:Ubuntu:20.04 / ruby2.7
Package
- Name
- ruby2.7
- Purl
- pkg:deb/tuxcare/ruby2.7?distro=ubuntu-20.04
TuxCare:Ubuntu:20.04 / ruby2.7-dev
Package
- Name
- ruby2.7-dev
- Purl
- pkg:deb/tuxcare/ruby2.7-dev?distro=ubuntu-20.04