Updated pcre2 packages fix a security vulnerability
Publication date: 21 Sep 2026Modification date: 21 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-86145
Description
Out-of-bounds write in pcre2_dfa_match() with recursive patterns under a
low heap limit (CVE-2026-86145).
References
- https://bugs.mageia.org/show_bug.cgi?id=36263
- https://www.openwall.com/lists/oss-security/2026/09/04/7
- https://www.openwall.com/lists/oss-security/2026/09/05/3
- https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-2p8c-ff85-vh9x
- https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-3r4p-g7gg-ppmf
- https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-q8g2-wprr-34m9
- https://www.cve.org/CVERecord?id=CVE-2026-86145
SRPMS
10/core
- pcre2-10.48-1.mga10
9/core
- pcre2-10.48-1.mga9