{"id":"ALSA-2026:81613","summary":"Important: pcre2 security update","details":"The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl.   \n\nSecurity Fix(es):  \n\n  * pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions (CVE-2026-86145)\n  * pcre2: PCRE2: Out-of-bounds write via large pattern input (CVE-2026-89157)\n  * PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms (CVE-2026-89158)\n  * pcre2: pcre2: Out-of-bounds write via crafted regular expression (CVE-2026-103111)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","modified":"2026-10-13T11:57:07.553526409Z","published":"2026-10-12T00:00:00Z","related":["CVE-2026-103111","CVE-2026-86145","CVE-2026-89157","CVE-2026-89158"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:81613"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-103111"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-86145"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-89157"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-89158"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2528993"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2531744"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2531746"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2543797"},{"type":"ADVISORY","url":"https://errata.almalinux.org/8/ALSA-2026-81613.html"}],"affected":[{"package":{"name":"pcre2","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/pcre2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.32-4.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:81613.json"}},{"package":{"name":"pcre2-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/pcre2-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.32-4.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:81613.json"}},{"package":{"name":"pcre2-tools","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/pcre2-tools"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.32-4.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:81613.json"}},{"package":{"name":"pcre2-utf16","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/pcre2-utf16"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.32-4.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:81613.json"}},{"package":{"name":"pcre2-utf32","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/pcre2-utf32"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.32-4.el8_10"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:81613.json"}}],"schema_version":"1.9.0"}