pcre2 security update

10.32-4 - Backport multiple CVEs fixes - CVE-2026-89157, CVE-2026-89158, CVE-2026-86145, CVE-2026-103111 - Add explicit Requires on pcre2-utf16/utf32 for pcre2-tools subpackage...

Fedora 43 : mingw-pcre2 (2026-98f3f016c4)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-98f3f016c4 advisory. Update to pcre-10.48 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

Fedora 45 : mingw-pcre2 (2026-68e2c40a81)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-68e2c40a81 advisory. Update to pcre-10.48 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

OESA-2026-3816 pcre2 security update

PCRE2 is a re-working of the original PCRE1 library to provide an entirely new API. Since its initial release in 2015, there has been further development of the code and it now differs from PCRE1 in more than just the API. PCRE2 is written in C, and it has its own API. There are three sets of...

OESA-2026-3815 pcre2 security update

PCRE2 is a re-working of the original PCRE1 library to provide an entirely new API. Since its initial release in 2015, there has been further development of the code and it now differs from PCRE1 in more than just the API. PCRE2 is written in C, and it has its own API. There are three sets of...

ROOT-OS-DEBIAN-13-CVE-2026-86145 CVE-2026-86145 in pcre2 - Patched by Root

Root has patched CVE-2026-86145 in the pcre2 package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-86145

creationtimestamp| type| source ---|---|--- 2026-09-05 06:56:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/a4kujdw2f5qmm 2026-09-05 07:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muqvszgysi2e...

DEBIAN-CVE-2026-86145

PCRE2 before 10.48 allows a pcre2dfamatch out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check even though a newly allocated block, for the same purpose, does have a size check. This outcome requires an attacker-controlled regula...