Release date:
2026-09-17 17:43:02 UTC
Description:
* SECURITY UPDATE: out-of-bounds write in pcre2_dfa_match() because
more_workspace() reused a cached recursive-DFA workspace block without
checking it was large enough for the request, so a pattern using nested
assertions followed by recursion under a small heap limit could overflow
the heap allocation (PCRE2 before 10.48)
- debian/patches/CVE-2026-86145.patch: reject a cached next block smaller
than the requested size, and clamp a newly allocated block to the
remaining heap allowance without overflowing the size computation, in
more_workspace() in src/pcre2_dfa_match.c
- CVE-2026-86145
Updated packages:
-
libpcre2-16-0_10.36-2+deb11u1+tuxcare.els2_amd64.deb
sha:feb60bf4bb42529e923632a5e0726a79c94befc9
-
libpcre2-32-0_10.36-2+deb11u1+tuxcare.els2_amd64.deb
sha:43881bb202f7b31e04f92eec3993f4f26c5a7c1e
-
libpcre2-8-0_10.36-2+deb11u1+tuxcare.els2_amd64.deb
sha:5a9d4ba90092b479ac55eaebb508def813529b7d
-
libpcre2-dev_10.36-2+deb11u1+tuxcare.els2_amd64.deb
sha:eeb9dcc8c40ffc7741de82a3726508aaa29da717
-
libpcre2-posix2_10.36-2+deb11u1+tuxcare.els2_amd64.deb
sha:2f62c4bc9127668dd2c2ab0714a164503d763e50
-
pcre2-utils_10.36-2+deb11u1+tuxcare.els2_amd64.deb
sha:26fba85ad45aed2d33e8b0162d4cccd51fa64521
-
libpcre2-16-0_10.36-2+deb11u1+tuxcare.els2_arm64.deb
sha:cb0f07e719f42f3ef17f707fc8d0b76156d932dd
-
libpcre2-32-0_10.36-2+deb11u1+tuxcare.els2_arm64.deb
sha:4fa679bc0b825199122a2ff2dac9e69bc4371500
-
libpcre2-8-0_10.36-2+deb11u1+tuxcare.els2_arm64.deb
sha:8112fb2e8c3220db100b8b8a7d844ded1e163388
-
libpcre2-dev_10.36-2+deb11u1+tuxcare.els2_arm64.deb
sha:eb9fa9fe1d9814dc2cd2a9ade5766f661daff9a4
-
libpcre2-posix2_10.36-2+deb11u1+tuxcare.els2_arm64.deb
sha:65070b9a5e09eaa866f7c510e2d0ce97f57a1a10
-
pcre2-utils_10.36-2+deb11u1+tuxcare.els2_arm64.deb
sha:9796441775cddd12762d1df636c52b29ea77ac9f
-
libpcre2-16-0_10.36-2+deb11u1+tuxcare.els2_armel.deb
sha:ac3dc47873efee94f7ecf9e8c4d4d119ca902bd4
-
libpcre2-32-0_10.36-2+deb11u1+tuxcare.els2_armel.deb
sha:1571d8ddad1720c1d9c7cb52862fb9f755e0abb9
-
libpcre2-8-0_10.36-2+deb11u1+tuxcare.els2_armel.deb
sha:acf015ff986cd4d7c073b0051440a5bf58523a18
-
libpcre2-dev_10.36-2+deb11u1+tuxcare.els2_armel.deb
sha:7d98ac6c565fed640ec3e66355e5068242300d1d
-
libpcre2-posix2_10.36-2+deb11u1+tuxcare.els2_armel.deb
sha:94a69faa5e1a65f4446bada886eacc95e99b17c7
-
pcre2-utils_10.36-2+deb11u1+tuxcare.els2_armel.deb
sha:8e1b074e2c03598ad67a57ee5d60a6e52d702754
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
