[CLSA-2026:1791568039] Fix CVE(s): CVE-2026-89161
Type:
security
Severity:
Important
Release date:
2026-10-09 17:47:39 UTC
Description:
* SECURITY UPDATE: Incorrect free in pcre2_jit_match() when a match data block that held a copied subject from an earlier pcre2_match() call with PCRE2_COPY_MATCHED_SUBJECT was reused, because the JIT fast path overwrote the subject without releasing the copy - debian/patches/CVE-2026-89161.patch: free a previously copied subject in src/pcre2_jit_match.c, with pcre2test handling and test coverage in testdata/testinput17 and testdata/testoutput17 - CVE-2026-89161
CVEs fixed:
Updated packages:
  • libpcre2-16-0_10.36-2+deb11u1+tuxcare.els7_amd64.deb
    sha:8450934b7ac129fbea008bf259a8ade565e2266e
  • libpcre2-32-0_10.36-2+deb11u1+tuxcare.els7_amd64.deb
    sha:627930198d5f01c24422f5aaff766cf9e9879ea7
  • libpcre2-8-0_10.36-2+deb11u1+tuxcare.els7_amd64.deb
    sha:2aa5fc9307cc7385f7f183b043f4e907d31264ad
  • libpcre2-dev_10.36-2+deb11u1+tuxcare.els7_amd64.deb
    sha:84c90086ae3917323e742eff42a8555267e70d3a
  • libpcre2-posix2_10.36-2+deb11u1+tuxcare.els7_amd64.deb
    sha:e04e30cd5179cabcf47598863d8273761c4e6dba
  • pcre2-utils_10.36-2+deb11u1+tuxcare.els7_amd64.deb
    sha:d8b53992d143867abe088eef9074f6ff93905c66
  • libpcre2-16-0_10.36-2+deb11u1+tuxcare.els7_arm64.deb
    sha:0f7b0b2411ce20ecd406382e4f9e9e70ccdc779a
  • libpcre2-32-0_10.36-2+deb11u1+tuxcare.els7_arm64.deb
    sha:5b6255e7afe5f8d8fe01eb8427f759628505c1f9
  • libpcre2-8-0_10.36-2+deb11u1+tuxcare.els7_arm64.deb
    sha:47f208f02999bd7603884c6cbde02749bfb25442
  • libpcre2-dev_10.36-2+deb11u1+tuxcare.els7_arm64.deb
    sha:836ca7d4cee53079181282d3f697f376a781dc3a
  • libpcre2-posix2_10.36-2+deb11u1+tuxcare.els7_arm64.deb
    sha:f32ec2ba5c717ea5c5b473fb11a81ecd0be807f9
  • pcre2-utils_10.36-2+deb11u1+tuxcare.els7_arm64.deb
    sha:6cd3f68075f6d289f7d1ea92ddbc85f9dcd90f9d
  • libpcre2-16-0_10.36-2+deb11u1+tuxcare.els7_armel.deb
    sha:d84bfc86cc41b456345b6f49d1dbe8049cf5042b
  • libpcre2-32-0_10.36-2+deb11u1+tuxcare.els7_armel.deb
    sha:83f32362275a143b2dfb660d931989faa9ab0b1f
  • libpcre2-8-0_10.36-2+deb11u1+tuxcare.els7_armel.deb
    sha:0b7ceb4ad69573d9f6adca757c0d064881ffda12
  • libpcre2-dev_10.36-2+deb11u1+tuxcare.els7_armel.deb
    sha:9a7a101102dbe904490f05ae9c17d1edb93bd9d7
  • libpcre2-posix2_10.36-2+deb11u1+tuxcare.els7_armel.deb
    sha:f21cac02da5317e6994aaab443c20ec504b67823
  • pcre2-utils_10.36-2+deb11u1+tuxcare.els7_armel.deb
    sha:5c7ea465ba5bf2a632664d688de57ec26b4f8872
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.