An update that solves one vulnerability can now be installed.. # Security update for pcre2 Announcement ID: SUSE-SU-2026:21172-1 Release Date: 2026-04-10T18:29:30Z Rating: moderate References: * bsc#1248842 Cross-References: * CVE-2025-58050 CVSS scores: * CVE-2025-58050 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-58050 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2025-58050 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-58050 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for pcre2 fixes the following issue: * CVE-2025-58050: integer overflow leads to heap buffer overread in match_ref due to missing boundary restoration in SCS (bsc#1248842). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-528=1 * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-528=1 ## Package List: * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libpcre2-8-0-10.45-160000.3.1 * pcre2-tools-debuginfo-10.45-160000.3.1 * libpcre2-32-0-10.45-160000.3.1 * libpcre2-posix3-debuginfo-10.45-160000.3.1 * libpcre2-16-0-10.45-160000.3.1 * libpcre2-32-0-debuginfo-10.45-160000.3.1 * pcre2-devel-10.45-160000.3.1 * libpcre2-8-0-debuginfo-10.45-160000.3.1 * pcre2-debugsource-10.45-160000.3.1 *libpcre2-16-0-debuginfo-10.45-160000.3.1 * libpcre2-posix3-10.45-160000.3.1 * pcre2-devel-static-10.45-160000.3.1 * pcre2-tools-10.45-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * pcre2-doc-10.45-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libpcre2-8-0-10.45-160000.3.1 * pcre2-tools-debuginfo-10.45-160000.3.1 * libpcre2-32-0-10.45-160000.3.1 * libpcre2-posix3-debuginfo-10.45-160000.3.1 * libpcre2-16-0-10.45-160000.3.1 * libpcre2-32-0-debuginfo-10.45-160000.3.1 * pcre2-devel-10.45-160000.3.1 * libpcre2-8-0-debuginfo-10.45-160000.3.1 * pcre2-debugsource-10.45-160000.3.1 * libpcre2-16-0-debuginfo-10.45-160000.3.1 * libpcre2-posix3-10.45-160000.3.1 * pcre2-devel-static-10.45-160000.3.1 * pcre2-tools-10.45-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * pcre2-doc-10.45-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-58050.html * https://bugzilla.suse.com/show_bug.cgi?id=1248842 . An update for pcre2 addresses an integer overflow vulnerability with moderate severity on SUSE Linux. Install patches to enhance security.. pcre2 security update, SUSE Linux vulnerability, integer overflow fix. . LinuxSecurity.com Team
An update for lua is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Low: lua security update Advisory ID: RHSA-2023:2582-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:2582 Issue date: 2023-05-09 CVE Names: CVE-2022-28805 ==================================================================== 1. Summary: An update for lua is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 9) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux BaseOS (v. 9) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux CRB (v. 9) - aarch64, ppc64le, s390x, x86_64 3. Description: The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fix(es): * lua: heap buffer overread (CVE-2022-28805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from the References section. 4. Solution: For details on howto apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2073884 - CVE-2022-28805 lua: heap buffer overread 6. Package List: Red Hat Enterprise Linux AppStream (v. 9): aarch64: lua-5.4.4-3.el9.aarch64.rpm lua-debuginfo-5.4.4-3.el9.aarch64.rpm lua-debugsource-5.4.4-3.el9.aarch64.rpm lua-libs-debuginfo-5.4.4-3.el9.aarch64.rpm ppc64le: lua-5.4.4-3.el9.ppc64le.rpm lua-debuginfo-5.4.4-3.el9.ppc64le.rpm lua-debugsource-5.4.4-3.el9.ppc64le.rpm lua-libs-debuginfo-5.4.4-3.el9.ppc64le.rpm s390x: lua-5.4.4-3.el9.s390x.rpm lua-debuginfo-5.4.4-3.el9.s390x.rpm lua-debugsource-5.4.4-3.el9.s390x.rpm lua-libs-debuginfo-5.4.4-3.el9.s390x.rpm x86_64: lua-5.4.4-3.el9.x86_64.rpm lua-debuginfo-5.4.4-3.el9.x86_64.rpm lua-debugsource-5.4.4-3.el9.x86_64.rpm lua-libs-debuginfo-5.4.4-3.el9.x86_64.rpm Red Hat Enterprise Linux BaseOS (v. 9): Source: lua-5.4.4-3.el9.src.rpm aarch64: lua-debuginfo-5.4.4-3.el9.aarch64.rpm lua-debugsource-5.4.4-3.el9.aarch64.rpm lua-libs-5.4.4-3.el9.aarch64.rpm lua-libs-debuginfo-5.4.4-3.el9.aarch64.rpm ppc64le: lua-debuginfo-5.4.4-3.el9.ppc64le.rpm lua-debugsource-5.4.4-3.el9.ppc64le.rpm lua-libs-5.4.4-3.el9.ppc64le.rpm lua-libs-debuginfo-5.4.4-3.el9.ppc64le.rpm s390x: lua-debuginfo-5.4.4-3.el9.s390x.rpm lua-debugsource-5.4.4-3.el9.s390x.rpm lua-libs-5.4.4-3.el9.s390x.rpm lua-libs-debuginfo-5.4.4-3.el9.s390x.rpm x86_64: lua-debuginfo-5.4.4-3.el9.i686.rpm lua-debuginfo-5.4.4-3.el9.x86_64.rpm lua-debugsource-5.4.4-3.el9.i686.rpm lua-debugsource-5.4.4-3.el9.x86_64.rpm lua-libs-5.4.4-3.el9.i686.rpm lua-libs-5.4.4-3.el9.x86_64.rpm lua-libs-debuginfo-5.4.4-3.el9.i686.rpm lua-libs-debuginfo-5.4.4-3.el9.x86_64.rpm Red Hat Enterprise Linux CRB (v.9): aarch64: lua-debuginfo-5.4.4-3.el9.aarch64.rpm lua-debugsource-5.4.4-3.el9.aarch64.rpm lua-devel-5.4.4-3.el9.aarch64.rpm lua-libs-debuginfo-5.4.4-3.el9.aarch64.rpm ppc64le: lua-debuginfo-5.4.4-3.el9.ppc64le.rpm lua-debugsource-5.4.4-3.el9.ppc64le.rpm lua-devel-5.4.4-3.el9.ppc64le.rpm lua-libs-debuginfo-5.4.4-3.el9.ppc64le.rpm s390x: lua-debuginfo-5.4.4-3.el9.s390x.rpm lua-debugsource-5.4.4-3.el9.s390x.rpm lua-devel-5.4.4-3.el9.s390x.rpm lua-libs-debuginfo-5.4.4-3.el9.s390x.rpm x86_64: lua-5.4.4-3.el9.i686.rpm lua-debuginfo-5.4.4-3.el9.i686.rpm lua-debuginfo-5.4.4-3.el9.x86_64.rpm lua-debugsource-5.4.4-3.el9.i686.rpm lua-debugsource-5.4.4-3.el9.x86_64.rpm lua-devel-5.4.4-3.el9.i686.rpm lua-devel-5.4.4-3.el9.x86_64.rpm lua-libs-debuginfo-5.4.4-3.el9.i686.rpm lua-libs-debuginfo-5.4.4-3.el9.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2022-28805 https://access.redhat.com/security/updates/classification/#low https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBZFo1ztzjgjWX9erEAQgYrA/9HjgnBlv6Ut9K4dAx2q0MnxIwf9TaBBHF LjNRNjY9vnxcf+3obKjbjgkHjCRuAeJvkxhsEmPwxOwZoRu0oS7AyjEi2r9gM3Ji tykW5Y1yoLmMyXlcgYs7fWxmkP7nN6cN2wIbpMiYHCEXf6Nm8yRvBevzE+aGKO0w wlBXac26BaxI9EMGoo+VB3AGRmSxuWJRCme8RRLO0QRPdtfTtgzlv7qyZW0+heDw 1auRjxOKJoA5ivuesuFKtOJrkqECztZ5ATnKKHzAS8VBSb2j8z2HaJx0EMddFH50 4dOTOEzzt4k/uAoExSnJeb9UxC9/JpNHHZ3VjojgAw4TyV5aJuwd807Pb9MqhCux zPbD7feiLDlKujx3iJBYSJtQfLtRQmBVs1LxQCsTTWxAoAJmd3nLyiBfrTjl8jW5 oNo8KBhYAt1rrVg+fbS7XCOsB12as5gW+sGjXFM/u2o0jTI2Eu24LxP19LeCxUJe ouEGTBAoJCRo58TEh1yVL62EkUDjoGDmd1yJJHiUhjylQ+R2NWtVijrdjH3hrCB+ b10undSd3NCFFJ7fE8KtjPTesqIA3NslzcnDUZDNHLZFvkJYANHVq4+XUYrW6jmQ kn3zNKzdNvpLydR82xaTSfPTsx13A0GdxfUICTL+zLx4Zt3xZcruNU3kXg06T1eL u7CRCzIg2pE=QjQU -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Get the latest Linux and open source security news straight to your inbox.