[CLSA-2026:1789719977] alt-pcre: Fix of CVE-2019-20838
Type:
security
Severity:
Important
Release date:
2026-09-18 08:26:30 UTC
Description:
- On el10 only, export LDFLAGS with -Wl,-rpath=%{_libdir} before configure. The el10 toolchain emits neither RPATH nor RUNPATH, so /opt/alt/pcre/usr/bin/pcregrep failed to start with "libpcre.so.1 => not found" even though the package ships that library, and the QA integrity check flagged it. Confirmed with readelf: el6, el7 and el8 all carry RPATH=/opt/alt/pcre/usr/lib64 implicitly from libtool and are left alone. - This is a live defect, not a regression: the already-released alt-pcre-8.42-1.el10 has no RPATH either. The %if rhel >= 10 QA_RPATHS override above only relaxes the rpath checker; it never produced an rpath.
CVEs fixed:
Updated packages:
  • alt-pcre-8.45-2.el7.x86_64.rpm
    sha:69f88be71640588cea747248dcaf28e9a4b99fef818bcb08c9513850d7494086
  • alt-pcre-devel-8.45-2.el7.x86_64.rpm
    sha:49b3da6467e8817e1f717154c39ea3ba453ac1083c9fef10f2140e38d2383bb2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.