Red Hat Security Advisory

RHSA-2020:4539

pcre2 security and enhancement update

Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) pcre2-tools-10.32-2.el8
Red Hat Enterprise Linux BaseOS (v. 8) pcre2-10.32-2.el8, pcre2-devel-10.32-2.el8, pcre2-utf16-10.32-2.el8 +1

Fixes 1 record

TI-2019-14683 CVE-2019-20454 · GHSA-6wcm-vmc4-h93p

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT…

LOW 36

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01561 Published 2020-02-14 Partial fix CWE-125