Affected: Alpaquita:25: pcre2, Alpaquita:stream: pcre2, BellSoft Hardened Containers:25: pcre2, BellSoft Hardened Containers:stream: pcre2

In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.

In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.

Security update for pcre2

pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback pcre2: PCRE2: Out-of-bounds write via large pattern input PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match pcre2: PCRE2: Information disclosure via pcre2_serialize_encode

Security update for pcre2

Affected: Ubuntu:16.04:LTS: pcre2, Ubuntu:Pro:18.04:LTS: pcre2, Ubuntu:20.04:LTS: pcre2, Ubuntu:22.04:LTS: pcre2, Ubuntu:24.04:LTS: pcre2, Ubuntu:26.04:LTS: pcre2

In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.

Ein Angreifer kann mehrere Schwachstellen in PCRE2 (Perl Compatible Regular Expressions) ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Speicher zu beschädigen, Informationen offenzulegen oder Denial-of-Service-Zustände herbeizuführen.