{"id":"CLSA-2026-1787666659","summary":"Fix CVE(s): CVE-2026-43958","details":"   * SECURITY UPDATE: stack-based buffer overflow in rrdcached CREATE request\n     handling\n     - debian/patches/CVE-2026-43958.patch: bound the av[] argument array in\n       handle_request_create() so an oversized CREATE request with more than\n       128 DS:/RRA: definitions can no longer overflow the stack buffer, plus\n       the accompanying upstream hardening in rrd_xport, rrd_graph,\n       rrd_graph_helper and rrd_daemon. The rrd_xport fill loop uses the\n       index-based bounds check from upstream follow-up a8174e6a rather than\n       the timestamp comparison it originally shipped with.\n     - CVE-2026-43958","modified":"2026-10-26T09:32:02.520513708Z","published":"2026-08-25T14:04:31Z","upstream":["CVE-2026-43958"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1787666659.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43958"}],"affected":[{"package":{"name":"liblua5.1-rrd-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/liblua5.1-rrd-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1787666659.json"}},{"package":{"name":"liblua5.1-rrd0","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/liblua5.1-rrd0?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1787666659.json"}},{"package":{"name":"librrd-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/librrd-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1787666659.json"}},{"package":{"name":"librrd4","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/librrd4?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1787666659.json"}},{"package":{"name":"librrdp-perl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/librrdp-perl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1787666659.json"}},{"package":{"name":"librrds-perl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/librrds-perl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1787666659.json"}},{"package":{"name":"lua-rrd","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/lua-rrd?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1787666659.json"}},{"package":{"name":"lua-rrd-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/lua-rrd-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1787666659.json"}},{"package":{"name":"python-rrdtool","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/python-rrdtool?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1787666659.json"}},{"package":{"name":"rrdcached","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/rrdcached?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1787666659.json"}},{"package":{"name":"rrdtool","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/rrdtool?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1787666659.json"}},{"package":{"name":"rrdtool-tcl","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/rrdtool-tcl?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1787666659.json"}},{"package":{"name":"ruby-rrd","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/ruby-rrd?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1787666659.json"}}],"schema_version":"1.9.0"}