Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is application sandboxing truly safe?
Loading...
Explore Latest Linux Security advisories
We found 26 articles for you...
202
security advisorymoderateOpenSUSEopenSUSE Leap 16.0 pcre2 Moderate Buffer Overread 2026-20512-1
An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for pcre2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20512-1 Rating: moderate References: * bsc#1248842 Cross-References: * CVE-2025-58050 CVSS scores: * CVE-2025-58050 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2025-58050 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for pcre2 fixes the following issue: - CVE-2025-58050: integer overflow leads to heap buffer overread in match_ref due to missing boundary restoration in SCS (bsc#1248842). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-528=1 Package List: - openSUSE Leap 16.0: libpcre2-16-0-10.45-160000.3.1 libpcre2-32-0-10.45-160000.3.1 libpcre2-8-0-10.45-160000.3.1 libpcre2-posix3-10.45-160000.3.1 pcre2-devel-10.45-160000.3.1 pcre2-devel-static-10.45-160000.3.1 pcre2-doc-10.45-160000.3.1 pcre2-tools-10.45-160000.3.1 References: * https://www.suse.com/security/cve/CVE-2025-58050.html . This update addresses a moderate risk buffer overread issue in pcre2 on openSUSE Leap with an associated CVE ID for tracking.. openSUSE CVE-2025-58050 Pcre2 Security Update. . LinuxSecurity.com Team
Apr 21, 2026
OpenSUSE
100
security advisorymoderateSuSESUSE Linux Enterprise Server 16.0 pcre2 Moderate Integer Overflow Issue
An update that solves one vulnerability can now be installed.. # Security update for pcre2 Announcement ID: SUSE-SU-2026:21172-1 Release Date: 2026-04-10T18:29:30Z Rating: moderate References: * bsc#1248842 Cross-References: * CVE-2025-58050 CVSS scores: * CVE-2025-58050 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-58050 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2025-58050 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-58050 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for pcre2 fixes the following issue: * CVE-2025-58050: integer overflow leads to heap buffer overread in match_ref due to missing boundary restoration in SCS (bsc#1248842). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-528=1 * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-528=1 ## Package List: * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libpcre2-8-0-10.45-160000.3.1 * pcre2-tools-debuginfo-10.45-160000.3.1 * libpcre2-32-0-10.45-160000.3.1 * libpcre2-posix3-debuginfo-10.45-160000.3.1 * libpcre2-16-0-10.45-160000.3.1 * libpcre2-32-0-debuginfo-10.45-160000.3.1 * pcre2-devel-10.45-160000.3.1 * libpcre2-8-0-debuginfo-10.45-160000.3.1 * pcre2-debugsource-10.45-160000.3.1 *libpcre2-16-0-debuginfo-10.45-160000.3.1 * libpcre2-posix3-10.45-160000.3.1 * pcre2-devel-static-10.45-160000.3.1 * pcre2-tools-10.45-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * pcre2-doc-10.45-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libpcre2-8-0-10.45-160000.3.1 * pcre2-tools-debuginfo-10.45-160000.3.1 * libpcre2-32-0-10.45-160000.3.1 * libpcre2-posix3-debuginfo-10.45-160000.3.1 * libpcre2-16-0-10.45-160000.3.1 * libpcre2-32-0-debuginfo-10.45-160000.3.1 * pcre2-devel-10.45-160000.3.1 * libpcre2-8-0-debuginfo-10.45-160000.3.1 * pcre2-debugsource-10.45-160000.3.1 * libpcre2-16-0-debuginfo-10.45-160000.3.1 * libpcre2-posix3-10.45-160000.3.1 * pcre2-devel-static-10.45-160000.3.1 * pcre2-tools-10.45-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * pcre2-doc-10.45-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-58050.html * https://bugzilla.suse.com/show_bug.cgi?id=1248842 . An update for pcre2 addresses an integer overflow vulnerability with moderate severity on SUSE Linux. Install patches to enhance security.. pcre2 security update, SUSE Linux vulnerability, integer overflow fix. . LinuxSecurity.com Team
Apr 21, 2026
SuSE
100
security advisorymoderateSuSESUSE Linux Micro 6.2 pcre2 Moderate Heap Buffer Overread Flaw 2026-21094-1
An update that solves one vulnerability can now be installed.. # Security update for pcre2 Announcement ID: SUSE-SU-2026:21094-1 Release Date: 2026-04-10T18:24:31Z Rating: moderate References: * bsc#1248842 Cross-References: * CVE-2025-58050 CVSS scores: * CVE-2025-58050 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-58050 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2025-58050 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-58050 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for pcre2 fixes the following issue: * CVE-2025-58050: integer overflow leads to heap buffer overread in match_ref due to missing boundary restoration in SCS (bsc#1248842). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-528=1 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libpcre2-8-0-10.45-160000.3.1 * libpcre2-8-0-debuginfo-10.45-160000.3.1 * pcre2-debugsource-10.45-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-58050.html * https://bugzilla.suse.com/show_bug.cgi?id=1248842 . Update for SUSE Linux Micro 6.2 addresses moderate risk of heap overflow in pcre2. Essential patch instructions inside.. SUSE Linux Micro,pcre2 update,heap overflow,Patch Instructions,Security Advisory. . LinuxSecurity.com Team
Apr 16, 2026
SuSE
89
security advisoryfedoraupdateFedora 42 pcre2 Critical Update CVE-2025-58050 Threat Fix
Fix for CVE-2025-58050. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-5905c468d2 2025-10-28 01:29:53.364203+00:00 -------------------------------------------------------------------------------- Name : pcre2 Product : Fedora 42 Version : 10.46 Release : 1.fc42 URL : Summary : Perl-compatible regular expression library Description : PCRE2 is a re-working of the original PCRE (Perl-compatible regular expression) library to provide an entirely new API. PCRE2 is written in C, and it has its own API. There are three sets of functions, one for the 8-bit library, which processes strings of bytes, one for the 16-bit library, which processes strings of 16-bit values, and one for the 32-bit library, which processes strings of 32-bit values. There are no C++ wrappers. This package provides support for strings in 8-bit and UTF-8 encodings. Install pcre2-utf16 or pcre2-utf32 packages for the other ones. The distribution does contain a set of C wrapper functions for the 8-bit library that are based on the POSIX regular expression API (see the pcre2posix man page). These can be found in a library called libpcre2posix. Note that this just provides a POSIX calling interface to PCRE2; the regular expressions themselves still follow Perl syntax and semantics. The POSIX API is restricted, and does not give full access to all of PCRE2's facilities. -------------------------------------------------------------------------------- Update Information: Fix for CVE-2025-58050 -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 1 2025 Lukas Javorsky - 10.46-1 - Rebase to version 10.46 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2405311 - PCRE2 10.45 - CVD-2025-58080 https://bugzilla.redhat.com/show_bug.cgi?id=2405311 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-5905c468d2' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Oct 28, 2025
Fedora
172
security advisorycriticalthreatUbuntu 25.04: PCRE2 Critical Information Exposure USN-7777-1
PCRE2 could be made to expose sensitive information.. ========================================================================== Ubuntu Security Notice USN-7777-1 September 25, 2025 pcre2 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.04 Summary: PCRE2 could be made to expose sensitive information. Software Description: - pcre2: New Perl Compatible Regular Expression Library Details: It was discovered that PCRE2 incorrectly handled the Scan SubString verb. An attacker could possibly use this issue to cause applications using PCRE2 to expose sensitive information. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.04 libpcre2-16-0 10.45-1ubuntu0.1 libpcre2-32-0 10.45-1ubuntu0.1 libpcre2-8-0 10.45-1ubuntu0.1 libpcre2-posix3 10.45-1ubuntu0.1 pcre2-utils 10.45-1ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7777-1 CVE-2025-58050 Package Information: https://launchpad.net/ubuntu/+source/pcre2/10.45-1ubuntu0.1 . Explore the recent PCRE2 vulnerability in Ubuntu 25.04, which may inadvertently expose private data. It's vital to apply suggested patches to reduce risks.. PCRE2 Update, Ubuntu Security, Information Exposure, Linux Security Alert, Security Advisory. . LinuxSecurity.com Team
Sep 25, 2025
Ubuntu
100
security advisoryDoSimportantSUSE: 2023:2696-1 Important: Bci/Nodejs Denial of Service Update
The container bci/nodejs was updated. The following patches have been included in this update:. SUSE Container Update Advisory: bci/nodejs ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:2696-1 Container Tags : bci/node:18 , bci/node:18-9.13 , bci/node:latest , bci/nodejs:18 , bci/nodejs:18-9.13 , bci/nodejs:latest Container Release : 9.13 Severity : important Type : security References : 1213514 1214054 CVE-2022-41409 CVE-2023-36054 ----------------------------------------------------------------- The container bci/nodejs was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:3325-1 Released: Wed Aug 16 08:26:08 2023 Summary: Security update for krb5 Type: security Severity: important References: 1214054,CVE-2023-36054 This update for krb5 fixes the following issues: - CVE-2023-36054: Fixed a DoS that could be triggered by an authenticated remote user. (bsc#1214054) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:3327-1 Released: Wed Aug 16 08:45:25 2023 Summary: Security update for pcre2 Type: security Severity: moderate References: 1213514,CVE-2022-41409 This update for pcre2 fixes the following issues: - CVE-2022-41409: Fixed integer overflow vulnerability in pcre2test that allows attackers to cause a denial of service via negative input (bsc#1213514). The following package changes have been done: - krb5-1.20.1-150500.3.3.1 updated - libpcre2-8-0-10.39-150400.4.9.1 updated - container:sles15-image-15.0.0-36.5.25 updated . SUSE Software Update Notification offers important patches for bci/python, outlining details of fixes and their criticality.. Bci/nodejs Security Update, Denial of Service Fix, Pcre2 Issues. . LinuxSecurity.com Team
Aug 17, 2023
SuSE
100
security advisorysecurity updateimportantSUSE: 2023:2693-1 Important: bci/golang DoS Security Fix
The container bci/golang was updated. The following patches have been included in this update:. SUSE Container Update Advisory: bci/golang ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:2693-1 Container Tags : bci/golang:1.20 , bci/golang:1.20-1.9.7 , bci/golang:latest , bci/golang:stable , bci/golang:stable-1.9.7 Container Release : 9.7 Severity : important Type : security References : 1213514 1214054 CVE-2022-41409 CVE-2023-36054 ----------------------------------------------------------------- The container bci/golang was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:3325-1 Released: Wed Aug 16 08:26:08 2023 Summary: Security update for krb5 Type: security Severity: important References: 1214054,CVE-2023-36054 This update for krb5 fixes the following issues: - CVE-2023-36054: Fixed a DoS that could be triggered by an authenticated remote user. (bsc#1214054) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:3327-1 Released: Wed Aug 16 08:45:25 2023 Summary: Security update for pcre2 Type: security Severity: moderate References: 1213514,CVE-2022-41409 This update for pcre2 fixes the following issues: - CVE-2022-41409: Fixed integer overflow vulnerability in pcre2test that allows attackers to cause a denial of service via negative input (bsc#1213514). The following package changes have been done: - krb5-1.20.1-150500.3.3.1 updated - libpcre2-8-0-10.39-150400.4.9.1 updated - container:sles15-image-15.0.0-36.5.25 updated . SUSE Container Upgrade for bci/nodejs: Updates addressing security vulnerabilities including buffer overflow and resource exhaustion issues are now released.. bci/golang Security Update, SUSE Patches, DoS Security Fixes. . LinuxSecurity.com Team
Aug 17, 2023
SuSE
100
security advisorymoderatedenial of serviceSUSE: 2023:2685-1 Moderate: bci/python Security Vulnerability Mitigation
The container bci/python was updated. The following patches have been included in this update:. SUSE Container Update Advisory: bci/python ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:2684-1 Container Tags : bci/python:3 , bci/python:3-15.32 , bci/python:3.10 , bci/python:3.10-15.32 Container Release : 15.32 Severity : moderate Type : security References : 1213514 CVE-2022-41409 ----------------------------------------------------------------- The container bci/python was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:3327-1 Released: Wed Aug 16 08:45:25 2023 Summary: Security update for pcre2 Type: security Severity: moderate References: 1213514,CVE-2022-41409 This update for pcre2 fixes the following issues: - CVE-2022-41409: Fixed integer overflow vulnerability in pcre2test that allows attackers to cause a denial of service via negative input (bsc#1213514). The following package changes have been done: - libpcre2-8-0-10.39-150400.4.9.1 updated . A safety enhancement for bci/python container mitigates integer overflow vulnerabilities linked to CVE-2022-41409.. bci/python security update, moderate advisory, container update. . LinuxSecurity.com Team
Aug 17, 2023
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is application sandboxing truly safe?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!