[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[SECURITY] [DLA 4816-1] pcre2 security update



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4816-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                 Salvatore Bonaccorso
October 03, 2026                              https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : pcre2
Version        : 10.42-1+deb12u2
CVE ID         : CVE-2026-103111
Debian Bug     : 1149217

Michael Allen discovered an out-of-bounds write vulnerability in PCRE2,
a library of functions to support Perl compatible regular expressions,
which could result in denial of service or potentially the execution of
arbitrary code.

For Debian 12 bookworm, this problem has been fixed in version
10.42-1+deb12u2.

We recommend that you upgrade your pcre2 packages.

For the detailed security status of pcre2 please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/pcre2

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=FVay
-----END PGP SIGNATURE-----


Reply to: