{"id":"CLSA-2026-1792798327","summary":"Fix CVE(s): CVE-2026-110264, CVE-2026-93577, CVE-2026-97229","details":"   * SECURITY UPDATE: integer overflow when compiling crafted regexps\n     - debian/patches/CVE-2026-110264.patch: reject overflowed range-repeat\n       and null-check IDs in huge regexps\n     - CVE-2026-110264\n   * SECURITY UPDATE: integer overflow when compiling crafted regexps\n     - debian/patches/CVE-2026-93577-CVE-2026-97229.patch: avoid overflow in\n       the quantifier expansion size check and reject a compiled program too\n       big for its offset type\n     - CVE-2026-93577\n     - CVE-2026-97229\n   * Fix build-time test failures:\n     - debian/patches/fix-timezone-tests-and-update-expired-certs.patch:\n       replace the expired test certificates and follow the installed\n       tzdata in the Asia/Singapore checks\n     - debian/patches/fix-eaddrinuse-race-in-port0-tests.patch: avoid\n       EADDRINUSE races in tests that listen on a random port\n     - debian/tests/excludes: skip the DTrace probe tests and two\n       permission tests, which fail when the test suite runs as root","modified":"2026-10-26T09:31:53.674382203Z","published":"2026-10-23T23:32:18Z","upstream":["CVE-2026-110264","CVE-2026-93577","CVE-2026-97229"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1792798327.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110264"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93577"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97229"}],"affected":[{"package":{"name":"libruby2.5","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libruby2.5?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.5-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792798327.json"}},{"package":{"name":"ruby2.5","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/ruby2.5?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.5-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792798327.json"}},{"package":{"name":"ruby2.5-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/ruby2.5-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.5-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792798327.json"}},{"package":{"name":"ruby2.5-doc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/ruby2.5-doc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.5-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792798327.json"}}],"schema_version":"1.9.0"}