[Git][security-tracker-team/security-tracker][master] Track fix for pcre2 issue via unstable

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Sep 28 19:28:59 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
206de709 by Salvatore Bonaccorso at 2026-09-28T20:28:35+02:00
Track fix for pcre2 issue via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -21,7 +21,7 @@ CVE-2026-97029
 	- flatpak 1.18.4-1
 	NOTE: https://github.com/flatpak/flatpak/security/advisories/GHSA-f3p8-vr7v-gxf2
 CVE-2026-XXXX [GHSA-r9hj-j2rw-4q3m: PCRE2: out-of-bounds write in JIT matching with large stack allocations]
-	- pcre2 <unfixed> (bug #1149217)
+	- pcre2 10.48-3.1 (bug #1149217)
 	NOTE: https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m
 	NOTE: Fixed by: https://github.com/PCRE2Project/pcre2/commit/2b4038298072684b0fae29b15bedfb1a75bda46d (pcre2-10.49)
 CVE-2026-XXXX [GHSA-9qqc-m43j-g4r2]



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/206de7097ab303fe8541cb3483771e9bd8066167

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/206de7097ab303fe8541cb3483771e9bd8066167
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260928/54474f60/attachment.htm>


More information about the debian-security-tracker-commits mailing list