{"id":"CLSA-2026-1792795468","summary":"Fix CVE(s): CVE-2026-110264, CVE-2026-93577, CVE-2026-97229","details":"   * SECURITY UPDATE: out-of-bounds repeat stack access in huge regexps\n     - debian/patches/CVE-2026-110264.patch: reject patterns whose range\n       repeat or null check IDs overflow in regcomp.c, regerror.c.\n     - CVE-2026-110264\n   * SECURITY UPDATE: wrapped jump offsets in the regexp compiler\n     - debian/patches/CVE-2026-93577-CVE-2026-97229.patch: check the\n       quantifier expansion size without int overflow and reject programs\n       too big for their offset type in regcomp.c, regint.h, regerror.c.\n     - CVE-2026-93577\n     - CVE-2026-97229\n   * Fix build-time test failures:\n     - debian/patches/exclude-tests-failing-on-build-system.patch: skip the\n       DTrace probe and permission tests, which fail when the test suite runs\n       as root, the TLS tests whose test certificates expired and the\n       Asia/Singapore tests that do not match the installed tzdata","modified":"2026-10-26T09:32:03.011735059Z","published":"2026-10-23T22:44:39Z","upstream":["CVE-2026-110264","CVE-2026-93577","CVE-2026-97229"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1792795468.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110264"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93577"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97229"}],"affected":[{"package":{"name":"libruby2.3","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libruby2.3?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-2~ubuntu16.04.16+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792795468.json"}},{"package":{"name":"ruby2.3","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/ruby2.3?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-2~ubuntu16.04.16+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792795468.json"}},{"package":{"name":"ruby2.3-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/ruby2.3-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-2~ubuntu16.04.16+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792795468.json"}},{"package":{"name":"ruby2.3-doc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/ruby2.3-doc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-2~ubuntu16.04.16+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792795468.json"}},{"package":{"name":"ruby2.3-tcltk","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/ruby2.3-tcltk?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-2~ubuntu16.04.16+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1792795468.json"}}],"schema_version":"1.9.0"}