Red Hat Security AdvisoryRHSA-2026:92901
pcre2 security update
Released 2026-10-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) pcre2-10.32-2.el8_4.1, pcre2-devel-10.32-2.el8_4.1, pcre2-utf16-10.32-2.el8_4.1 +1
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) pcre2-10.32-2.el8_4.1, pcre2-devel-10.32-2.el8_4.1, pcre2-utf16-10.32-2.el8_4.1 +1
Fixes 2 records
Priority HIGH 66
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00269 · Published 2026-09-30 · Partial fix · 10.49 CWE-787
Priority MEDIUM 42
PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purp…
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00425 · Published 2026-09-05 · Partial fix · 10.48 CWE-424
