Tuxcare Errata System 0.0.1 5.10 2026-08-31T17:18:13 Ubuntu 18.04 LTS * SECURITY UPDATE: Heap buffer overflow in the bundled zlib extension via Zlib::GzipReader#ungetc - debian/patches/CVE-2026-27820.patch: in zstream_buffer_ungets() (ext/zlib/zlib.c) the output buffer was expanded only when it was already full (rb_str_capacity(z->buf) <= ZSTREAM_BUF_FILLED(z)), so a large ungetc payload memmove()'d and wrote past the allocation. Make the expansion unconditional via zstream_expand_buffer_into(z, len), which guarantees capacity for filled + len before the memmove. Also backports the upstream regression test test_ungetc_buffer_underflow. - CVE-2026-27820 Critical TuxCare License Agreement CVE-2026-27820 alt-ruby35 alt-ruby35-bundled-gems alt-ruby35-default-gems alt-ruby35-devel alt-ruby35-doc alt-ruby35-libs alt-ruby35-rubygem-bigdecimal alt-ruby35-rubygem-bundler alt-ruby35-rubygem-io-console alt-ruby35-rubygem-irb alt-ruby35-rubygem-json alt-ruby35-rubygem-minitest alt-ruby35-rubygem-power-assert alt-ruby35-rubygem-psych alt-ruby35-rubygem-racc alt-ruby35-rubygem-rake alt-ruby35-rubygem-rbs alt-ruby35-rubygem-rdoc alt-ruby35-rubygem-rexml alt-ruby35-rubygem-rss alt-ruby35-rubygem-test-unit alt-ruby35-rubygem-typeprof alt-ruby35-rubygems alt-ruby35-rubygems-devel amd64 0:3.5.0~preview1-4 amd64 0:3.1.9-4 amd64 0:2.7.0.dev-4 amd64 0:0.8.0-4 amd64 0:1.15.2-4 amd64 0:2.10.2-4 amd64 0:5.25.5-4 amd64 0:2.0.5-4 amd64 0:5.2.3-4 amd64 1:1.8.1-4 amd64 0:13.2.1-4 amd64 0:3.9.2-4 amd64 0:6.13.1-4 amd64 0:3.4.1-4 amd64 0:0.3.1-4 amd64 0:3.6.8-4 amd64 0:0.30.1-4 amd64 0:3.7.0.dev-4