[CLSA-2026:1789721648] alt-pcre: Fix of CVE-2019-20838
Type:
security
Severity:
Important
Release date:
2026-09-18 08:54:24 UTC
Description:
- On el10 only, export LDFLAGS with -Wl,-rpath=%{_libdir} before configure. The el10 toolchain emits neither RPATH nor RUNPATH, so /opt/alt/pcre/usr/bin/pcregrep failed to start with "libpcre.so.1 => not found" even though the package ships that library, and the QA integrity check flagged it. Confirmed with readelf: el6, el7 and el8 all carry RPATH=/opt/alt/pcre/usr/lib64 implicitly from libtool and are left alone. - This is a live defect, not a regression: the already-released alt-pcre-8.42-1.el10 has no RPATH either. The %if rhel >= 10 QA_RPATHS override above only relaxes the rpath checker; it never produced an rpath.
CVEs fixed:
Updated packages:
  • alt-pcre-8.45-2.el6.x86_64.rpm
    sha:4a0d4d394d8ad10f7d3cd3d2465b37c548172119c404841ff1c3de8c0f01df0b
  • alt-pcre-devel-8.45-2.el6.x86_64.rpm
    sha:9bc5f23995252b433e928dbd3c904555a88c09aa7f4a99e780e16df13e93aded
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.