CLSA-2026-1792798327
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792798327.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1792798327
- Upstream
- Published
- 2026-10-23T23:32:18Z
- Modified
- 2026-10-26T09:31:53Z
- Summary
- Fix CVE(s): CVE-2026-110264, CVE-2026-93577, CVE-2026-97229
- Details
-
- SECURITY UPDATE: integer overflow when compiling crafted regexps
- debian/patches/CVE-2026-110264.patch: reject overflowed range-repeat and null-check IDs in huge regexps
- CVE-2026-110264
- SECURITY UPDATE: integer overflow when compiling crafted regexps
- debian/patches/CVE-2026-93577-CVE-2026-97229.patch: avoid overflow in the quantifier expansion size check and reject a compiled program too big for its offset type
- CVE-2026-93577
- CVE-2026-97229
- Fix build-time test failures:
- debian/patches/fix-timezone-tests-and-update-expired-certs.patch: replace the expired test certificates and follow the installed tzdata in the Asia/Singapore checks
- debian/patches/fix-eaddrinuse-race-in-port0-tests.patch: avoid EADDRINUSE races in tests that listen on a random port
- debian/tests/excludes: skip the DTrace probe tests and two permission tests, which fail when the test suite runs as root
- SECURITY UPDATE: integer overflow when compiling crafted regexps
- References
Affected packages
TuxCare:Debian:10 / libruby2.5
Package
- Name
- libruby2.5
- Purl
- pkg:deb/tuxcare/libruby2.5?distro=debian-10
TuxCare:Debian:10 / ruby2.5
Package
- Name
- ruby2.5
- Purl
- pkg:deb/tuxcare/ruby2.5?distro=debian-10
TuxCare:Debian:10 / ruby2.5-dev
Package
- Name
- ruby2.5-dev
- Purl
- pkg:deb/tuxcare/ruby2.5-dev?distro=debian-10