[Git][security-tracker-team/security-tracker][master] pcre2 spu

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
44dfd5be by Moritz Mühlenhoff at 2026-09-01T23:15:39+02:00
pcre2 spu

- - - - -


1 changed file:

- data/next-point-update.txt


Changes:

=====================================
data/next-point-update.txt
=====================================
@@ -536,3 +536,13 @@ CVE-2026-12725
 	[trixie] - dnsmasq 2.91-1+deb13u2
 CVE-2026-12969
 	[trixie] - dnsmasq 2.91-1+deb13u2
+CVE-2026-XXXX [GHSA-fmgr-6ggq-9859: PCRE2: integer overflow in pcre2_compile_32() causes out-of-bounds write on 32-bit systems]
+	[trixie] - pcre2 10.46-1~deb13u2
+CVE-2026-XXXX [GHSA-9qww-pwc4-77qq: PCRE2: out-of-bounds reads in pcre2_match() when matching invalid UTF subjects with PCRE2_MATCH_INVALID_UTF]
+	[trixie] - pcre2 10.46-1~deb13u2
+CVE-2026-XXXX [GHSA-q8g2-wprr-34m9: PCRE2: out-of-bounds write in pcre2_pattern_convert() with large patterns on 32-bit systems]
+	[trixie] - pcre2 10.46-1~deb13u2
+CVE-2026-XXXX [GHSA-3r4p-g7gg-ppmf: out-of-bounds write in pcre2_dfa_match() with recursive patterns under a low heap limit]
+	[trixie] - pcre2 10.46-1~deb13u2
+CVE-2026-XXXX [GHSA-2p8c-ff85-vh9x: PCRE2: out-of-bounds read in pcre2_match() after JIT fallback with invalid UTF]
+	[trixie] - pcre2 10.46-1~deb13u2



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/44dfd5be9da0dc62866c824c1ec3d5a5de85d6ad

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/44dfd5be9da0dc62866c824c1ec3d5a5de85d6ad
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260901/18abeecb/attachment.htm>