{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-89158: fix integer overflows in the pattern compiler", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792040049", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792040049" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/rhel7els/advisories/2026/clsa-2026_1792040049.json" } ], "tracking": { "current_release_date": "2026-10-15T18:50:47Z", "generator": { "date": "2026-10-15T18:50:47Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1792040049", "initial_release_date": "2026-10-15T04:55:04Z", "revision_history": [ { "date": "2026-10-15T04:55:04Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-15T12:19:11Z", "number": "2", "summary": "Update document" }, { "date": "2026-10-15T18:50:47Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "3" }, "title": "pcre2: Fix of CVE-2022-1586" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 7", "product": { "name": "Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7", "product_identification_helper": { "cpe": "cpe:2.3:o:redhat:enterprise_linux:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" } ], "category": "vendor", "name": "Red Hat, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.x86_64", "product": { "name": "pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.x86_64", "product_id": "pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/pcre2-devel@10.23-2.el7_9.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.x86_64", "product": { "name": "pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.x86_64", "product_id": "pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/pcre2-utf32@10.23-2.el7_9.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "pcre2-static-0:10.23-2.el7_9.tuxcare.els2.x86_64", "product": { "name": "pcre2-static-0:10.23-2.el7_9.tuxcare.els2.x86_64", "product_id": "pcre2-static-0:10.23-2.el7_9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/pcre2-static@10.23-2.el7_9.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.x86_64", "product": { "name": "pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.x86_64", "product_id": "pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/pcre2-utf16@10.23-2.el7_9.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "pcre2-0:10.23-2.el7_9.tuxcare.els2.x86_64", "product": { "name": "pcre2-0:10.23-2.el7_9.tuxcare.els2.x86_64", "product_id": "pcre2-0:10.23-2.el7_9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/pcre2@10.23-2.el7_9.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.x86_64", "product": { "name": "pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.x86_64", "product_id": "pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/pcre2-tools@10.23-2.el7_9.tuxcare.els2?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.i686", "product": { "name": "pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.i686", "product_id": "pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/pcre2-devel@10.23-2.el7_9.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.i686", "product": { "name": "pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.i686", "product_id": "pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/pcre2-utf32@10.23-2.el7_9.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "pcre2-static-0:10.23-2.el7_9.tuxcare.els2.i686", "product": { "name": "pcre2-static-0:10.23-2.el7_9.tuxcare.els2.i686", "product_id": "pcre2-static-0:10.23-2.el7_9.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/pcre2-static@10.23-2.el7_9.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.i686", "product": { "name": "pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.i686", "product_id": "pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/pcre2-utf16@10.23-2.el7_9.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "pcre2-0:10.23-2.el7_9.tuxcare.els2.i686", "product": { "name": "pcre2-0:10.23-2.el7_9.tuxcare.els2.i686", "product_id": "pcre2-0:10.23-2.el7_9.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/pcre2@10.23-2.el7_9.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.i686", "product": { "name": "pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.i686", "product_id": "pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/pcre2-tools@10.23-2.el7_9.tuxcare.els2?arch=i686" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.x86_64" }, "product_reference": "pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.i686 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.i686" }, "product_reference": "pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.i686", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.i686 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.i686" }, "product_reference": "pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.i686", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.x86_64" }, "product_reference": "pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "pcre2-static-0:10.23-2.el7_9.tuxcare.els2.i686 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:pcre2-static-0:10.23-2.el7_9.tuxcare.els2.i686" }, "product_reference": "pcre2-static-0:10.23-2.el7_9.tuxcare.els2.i686", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "pcre2-static-0:10.23-2.el7_9.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:pcre2-static-0:10.23-2.el7_9.tuxcare.els2.x86_64" }, "product_reference": "pcre2-static-0:10.23-2.el7_9.tuxcare.els2.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.i686 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.i686" }, "product_reference": "pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.i686", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.x86_64" }, "product_reference": "pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "pcre2-0:10.23-2.el7_9.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:pcre2-0:10.23-2.el7_9.tuxcare.els2.x86_64" }, "product_reference": "pcre2-0:10.23-2.el7_9.tuxcare.els2.x86_64", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "pcre2-0:10.23-2.el7_9.tuxcare.els2.i686 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:pcre2-0:10.23-2.el7_9.tuxcare.els2.i686" }, "product_reference": "pcre2-0:10.23-2.el7_9.tuxcare.els2.i686", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.i686 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.i686" }, "product_reference": "pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.i686", "relates_to_product_reference": "Red-Hat-7" }, { "category": "default_component_of", "full_product_name": { "name": "pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.x86_64 as a component of Red Hat Enterprise Linux 7", "product_id": "Red-Hat-7:pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.x86_64" }, "product_reference": "pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.x86_64", "relates_to_product_reference": "Red-Hat-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-89158", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Red-Hat-7:pcre2-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-static-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-static-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-89158" }, { "category": "external", "summary": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48", "url": "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48" }, { "category": "external", "summary": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-fmgr-6ggq-9859", "url": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-fmgr-6ggq-9859" } ], "release_date": "2026-09-11T04:18:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T04:54:11.280749Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792040049", "product_ids": [ "Red-Hat-7:pcre2-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-static-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-static-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792040049" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2022-1586", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Red-Hat-7:pcre2-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-static-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-static-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-1586" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2077976%2C", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2077976%2C" }, { "category": "external", "summary": "https://github.com/PCRE2Project/pcre2/commit/50a51cb7e67268e6ad417eb07c9de9bfea5cc55a%2C", "url": "https://github.com/PCRE2Project/pcre2/commit/50a51cb7e67268e6ad417eb07c9de9bfea5cc55a%2C" }, { "category": "external", "summary": "https://github.com/PCRE2Project/pcre2/commit/d4fa336fbcc388f89095b184ba6d99422cfc676c", "url": "https://github.com/PCRE2Project/pcre2/commit/d4fa336fbcc388f89095b184ba6d99422cfc676c" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/03/msg00014.html", "url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00014.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DWNG2NS3GINO6LQYUVC4BZLUQPJ3DYHA/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DWNG2NS3GINO6LQYUVC4BZLUQPJ3DYHA/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXINO3KKI5DICQ45E2FKD6MKVMGJLEKJ/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXINO3KKI5DICQ45E2FKD6MKVMGJLEKJ/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KAX7767BCUFC7JMDGP7GOQ5GIZCAUGBB/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KAX7767BCUFC7JMDGP7GOQ5GIZCAUGBB/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M2GLQQUEY5VFM57CFYXVIFOXN2HUZPDM/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M2GLQQUEY5VFM57CFYXVIFOXN2HUZPDM/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20221028-0009/", "url": "https://security.netapp.com/advisory/ntap-20221028-0009/" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2077976", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2077976" }, { "category": "external", "summary": "https://github.com/PCRE2Project/pcre2/commit/50a51cb7e67268e6ad417eb07c9de9bfea5cc55a", "url": "https://github.com/PCRE2Project/pcre2/commit/50a51cb7e67268e6ad417eb07c9de9bfea5cc55a" } ], "release_date": "2022-05-16T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T04:54:11.280749Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792040049", "product_ids": [ "Red-Hat-7:pcre2-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-static-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-static-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792040049" } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2022-41409", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Red-Hat-7:pcre2-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-static-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-static-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-41409" }, { "category": "external", "summary": "https://github.com/PCRE2Project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35", "url": "https://github.com/PCRE2Project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35" }, { "category": "external", "summary": "https://github.com/PCRE2Project/pcre2/issues/141", "url": "https://github.com/PCRE2Project/pcre2/issues/141" } ], "release_date": "2023-07-18T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T04:54:11.280749Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792040049", "product_ids": [ "Red-Hat-7:pcre2-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-devel-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-static-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-static-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-tools-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-utf16-0:10.23-2.el7_9.tuxcare.els2.x86_64", "Red-Hat-7:pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.i686", "Red-Hat-7:pcre2-utf32-0:10.23-2.el7_9.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792040049" } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }