Information on source package pcre2

Available versions

ReleaseVersion
bookworm10.42-1
bookworm (security)10.42-1+deb12u1
trixie10.46-1~deb13u1
forky10.48-2
sid10.48-2

Open issues

BugbookwormtrixieforkysidDescription
CVE-2026-89162fixedvulnerable (no DSA)fixedfixedIn PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes ...
CVE-2026-89161vulnerablevulnerable (no DSA)fixedfixedIn PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied ...
CVE-2026-89160fixedvulnerable (no DSA)fixedfixedPCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCR ...
CVE-2026-89158fixedvulnerable (no DSA)fixedfixedPCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 intege ...
CVE-2026-89157fixedvulnerable (no DSA)fixedfixedPCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert o ...
CVE-2026-89156fixedvulnerable (no DSA)fixedfixedPCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fa ...
CVE-2026-86145fixedvulnerable (no DSA)fixedfixedPCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write becaus ...

Resolved issues

BugDescription
TEMP-0827564-93E4E3Stack corruption from crafted pattern
CVE-2025-58050The PCRE2 library is a set of C functions that implement regular expre ...
CVE-2022-41409Integer overflow vulnerability in pcre2test before 10.41 allows attack ...
CVE-2022-1587An out-of-bounds read vulnerability was discovered in the PCRE2 librar ...
CVE-2022-1586An out-of-bounds read vulnerability was discovered in the PCRE2 librar ...
CVE-2019-20454An out-of-bounds read was discovered in PCRE before 10.34 when the pat ...
CVE-2017-8786pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial o ...
CVE-2017-8399PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based ...
CVE-2017-7186libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attacke ...
CVE-2016-3191The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 ...
CVE-2016-1283The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles t ...
CVE-2015-8380The pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles a ...

Security announcements

DSA / DLADescription
DLA-4772-1pcre2 - security update
DLA-3363-1pcre2 - security update

Search for package or bug name: Reporting problems