[CLSA-2026:1789719526] alt-pcre: Fix of CVE-2019-20838
Type:
security
Severity:
Important
Release date:
2026-09-18 08:19:00 UTC
Description:
- On el10 only, export LDFLAGS with -Wl,-rpath=%{_libdir} before configure. The el10 toolchain emits neither RPATH nor RUNPATH, so /opt/alt/pcre/usr/bin/pcregrep failed to start with "libpcre.so.1 => not found" even though the package ships that library, and the QA integrity check flagged it. Confirmed with readelf: el6, el7 and el8 all carry RPATH=/opt/alt/pcre/usr/lib64 implicitly from libtool and are left alone. - This is a live defect, not a regression: the already-released alt-pcre-8.42-1.el10 has no RPATH either. The %if rhel >= 10 QA_RPATHS override above only relaxes the rpath checker; it never produced an rpath.
CVEs fixed:
Updated packages:
  • alt-pcre-8.45-2.el8.x86_64.rpm
    sha:d041761053595c37b9b5a72f4f69a43c243e222d176d4d3dd3f6614a3aa6451b
  • alt-pcre-devel-8.45-2.el8.x86_64.rpm
    sha:451c260520502675252a11b72744dfc3a259a20a16858a9a929b5ff6606caff0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.