Summary
[10.32-4]
- Backport multiple CVEs fixes
- CVE-2026-89157, CVE-2026-89158, CVE-2026-86145, CVE-2026-103111
- Add explicit Requires on pcre2-utf16/utf32 for pcre2-tools subpackage
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | pcre2 | 0:10.32-4.el8_10 |
| Oracle Linux · 8 | pcre2-devel | 0:10.32-4.el8_10 |
| Oracle Linux · 8 | pcre2-tools | 0:10.32-4.el8_10 |
| Oracle Linux · 8 | pcre2-utf16 | 0:10.32-4.el8_10 |
| Oracle Linux · 8 | pcre2-utf32 | 0:10.32-4.el8_10 |
Vulnerabilities 4
-
High 8.2
PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursi…
-
High 7.6
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of…
-
Medium 6.5
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.
-
Medium 5.7
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a…