{"id":"ALSA-2026:81532","summary":"Important: pcre2 security update","details":"The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl.   \n\nSecurity Fix(es):  \n\n  * pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions (CVE-2026-86145)\n  * PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback (CVE-2026-89156)\n  * pcre2: PCRE2: Out-of-bounds write via large pattern input (CVE-2026-89157)\n  * pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching (CVE-2026-89160)\n  * PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms (CVE-2026-89158)\n  * pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match (CVE-2026-89161)\n  * pcre2: pcre2: Out-of-bounds write via crafted regular expression (CVE-2026-103111)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","modified":"2026-10-13T13:42:08.535800609Z","published":"2026-10-12T00:00:00Z","related":["CVE-2026-103111","CVE-2026-86145","CVE-2026-89156","CVE-2026-89157","CVE-2026-89158","CVE-2026-89160","CVE-2026-89161"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:81532"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-103111"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-86145"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-89156"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-89157"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-89158"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-89160"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-89161"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2528993"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2531743"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2531744"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2531745"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2531746"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2531747"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2543797"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-81532.html"}],"affected":[{"package":{"name":"pcre2","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pcre2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.40-7.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:81532.json"}},{"package":{"name":"pcre2-devel","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pcre2-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.40-7.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:81532.json"}},{"package":{"name":"pcre2-syntax","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pcre2-syntax"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.40-7.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:81532.json"}},{"package":{"name":"pcre2-tools","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pcre2-tools"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.40-7.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:81532.json"}},{"package":{"name":"pcre2-utf16","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pcre2-utf16"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.40-7.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:81532.json"}},{"package":{"name":"pcre2-utf32","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pcre2-utf32"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.40-7.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:81532.json"}}],"schema_version":"1.9.0"}