Red Hat Security Advisory

RHSA-2026:95371

pcre2 security update

Released 2026-11-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) pcre2-10.23-3.el7_9, pcre2-10.23-3.el7_9.ppc, pcre2-utf16-10.23-3.el7_9 +1
Red Hat Enterprise Linux Server Optional (v. 7 ELS) pcre2-devel-10.23-3.el7_9, pcre2-devel-10.23-3.el7_9.ppc, pcre2-static-10.23-3.el7_9 +4

Fixes 1 record

TI-2026-65598 CVE-2026-103111 · GHSA-mq4r-p73m-gphj

Out-of-bounds write in PCRE2

HIGH 66

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00269 Published 2026-09-30 Partial fix · 10.49 CWE-787