{"id":"CLSA-2026-1792795786","summary":"Fix CVE(s): CVE-2026-110264, CVE-2026-93577, CVE-2026-97229","details":"   * SECURITY UPDATE: out-of-bounds repeat stack access in Onigmo\n     - debian/patches/CVE-2026-110264.patch: reject patterns whose\n       range-repeat or null-check count overflows the internal ID type in\n       include/ruby/onigmo.h, regcomp.c, regerror.c.\n     - CVE-2026-110264\n   * SECURITY UPDATE: wrapped jump offsets in Onigmo\n     - debian/patches/CVE-2026-93577-CVE-2026-97229.patch: check the\n       quantifier expansion size without integer overflow and reject compiled\n       programs too big for their offset type in regcomp.c, regint.h.\n     - CVE-2026-93577\n     - CVE-2026-97229","modified":"2026-10-26T09:32:05.624342887Z","published":"2026-10-23T22:49:56Z","upstream":["CVE-2026-110264","CVE-2026-93577","CVE-2026-97229"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1792795786.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110264"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93577"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97229"}],"affected":[{"package":{"name":"libruby2.7","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libruby2.7?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-5ubuntu1.18+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1792795786.json"}},{"package":{"name":"ruby2.7","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/ruby2.7?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-5ubuntu1.18+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1792795786.json"}},{"package":{"name":"ruby2.7-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/ruby2.7-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-5ubuntu1.18+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1792795786.json"}},{"package":{"name":"ruby2.7-doc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/ruby2.7-doc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-5ubuntu1.18+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1792795786.json"}}],"schema_version":"1.9.0"}