Amazon Linux 2023 Security Advisory: ALAS2023-2026-3119
Advisory Released Date: 2026-09-29
Advisory Updated Date: 2026-09-29
Severity:
Important
Issue Overview:
In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur. (CVE-2026-89161)
Affected Packages:
pcre2
Issue Correction:
Run dnf update pcre2 --releasever 2023.12.20260928 or dnf update --advisory ALAS2023-2026-3119 --releasever 2023.12.20260928 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation
New Packages:
aarch64:
pcre2-debugsource-10.40-1.amzn2023.0.4.aarch64
pcre2-tools-debuginfo-10.40-1.amzn2023.0.4.aarch64
pcre2-utf32-debuginfo-10.40-1.amzn2023.0.4.aarch64
pcre2-static-10.40-1.amzn2023.0.4.aarch64
pcre2-10.40-1.amzn2023.0.4.aarch64
pcre2-debuginfo-10.40-1.amzn2023.0.4.aarch64
pcre2-utf16-debuginfo-10.40-1.amzn2023.0.4.aarch64
pcre2-utf16-10.40-1.amzn2023.0.4.aarch64
pcre2-utf32-10.40-1.amzn2023.0.4.aarch64
pcre2-tools-10.40-1.amzn2023.0.4.aarch64
pcre2-devel-10.40-1.amzn2023.0.4.aarch64
noarch:
pcre2-syntax-10.40-1.amzn2023.0.4.noarch
src:
pcre2-10.40-1.amzn2023.0.4.src
x86_64:
pcre2-debugsource-10.40-1.amzn2023.0.4.x86_64
pcre2-debuginfo-10.40-1.amzn2023.0.4.x86_64
pcre2-static-10.40-1.amzn2023.0.4.x86_64
pcre2-10.40-1.amzn2023.0.4.x86_64
pcre2-utf16-debuginfo-10.40-1.amzn2023.0.4.x86_64
pcre2-devel-10.40-1.amzn2023.0.4.x86_64
pcre2-utf32-debuginfo-10.40-1.amzn2023.0.4.x86_64
pcre2-tools-debuginfo-10.40-1.amzn2023.0.4.x86_64
pcre2-utf32-10.40-1.amzn2023.0.4.x86_64
pcre2-tools-10.40-1.amzn2023.0.4.x86_64
pcre2-utf16-10.40-1.amzn2023.0.4.x86_64