[CLSA-2026:1791366230] alt-pcre2: Fix of CVE-2026-103111
Type:
security
Severity:
Important
Release date:
2026-10-07 11:54:18 UTC
Description:
- Update to 10.49 - Security-only upstream release: GHSA-r9hj-j2rw-4q3m (HIGH, no CVE id yet) - out-of-bounds write in JIT matching when a growable JIT stack (pcre2_jit_stack_create/pcre2_jit_stack_assign) is used with a pattern that needs an unusually large JIT stack, e.g. very many capturing groups; only src/pcre2_jit_compile.c changes. Library versions 16:1:16 / posix 3:9:0 are revision-only bumps, so libpcre2-8/16/32.so.0 and libpcre2-posix.so.3 keep their sonames and no dependent rebuild is needed.
CVEs fixed:
Updated packages:
  • alt-pcre2-10.49-1.el6.x86_64.rpm
    sha:cd97111256f7cc2879598b63595c112fd54f6d105768e9c25266a9189a93a294
  • alt-pcre2-devel-10.49-1.el6.x86_64.rpm
    sha:fe702f64fd1e395763c4f3968d732d755d07dbb4eb54fdca1d15cf3d2a607ee8
  • alt-pcre2-static-10.49-1.el6.x86_64.rpm
    sha:04bbbdec10b76fa31a63a686525bcc089cc392b6062ef8aed71aafc871a0d129
  • alt-pcre2-tools-10.49-1.el6.x86_64.rpm
    sha:f2709c03c7d9719cbcb882c700592bb6965c84696b2a9dbf91c7e8ca579f79af
  • alt-pcre2-utf16-10.49-1.el6.x86_64.rpm
    sha:239dc75a790e24174396fec4d35cfdf1542c5b5d440f1bc7fd4ee674cd609f02
  • alt-pcre2-utf32-10.49-1.el6.x86_64.rpm
    sha:842cb9cdaed45495b92b6b78da2b619392e142be7daaad92fe8c25ff1d4f9c54
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.