File tree Expand file tree Collapse file tree 3 files changed +35
-2
lines changed Expand file tree Collapse file tree 3 files changed +35
-2
lines changed Original file line number Diff line number Diff line change @@ -7,6 +7,22 @@ there is also the log of commit messages.
7
7
Internal changes which are not visible to clients of the library are mostly not
8
8
listed here.
9
9
10
+ Version 10.46 27-August-2025
11
+ ----------------------------
12
+
13
+ 1. (#771) Security fix to prevent a read-past-the-end memory error, of
14
+ arbitrary length. An attacker-controlled regex pattern is required, and it
15
+ cannot be triggered by providing crafted subject (match) text. The
16
+ (*ACCEPT) and (*scs:) pattern features must be used together.
17
+
18
+ Release 10.44 and earlier are not affected.
19
+
20
+ This could have implications of denial-of-service or information disclosure,
21
+ and could potentially be used to escalate other vulnerabilities in a system
22
+ (such as information disclosure being used to escalate the severity of an
23
+ unrelated bug in another system).
24
+
25
+
10
26
Version 10.45 05-February-2025
11
27
------------------------------
12
28
Original file line number Diff line number Diff line change 1
1
News about PCRE2 releases
2
2
-------------------------
3
3
4
+ Version 10.46 27-August-2025
5
+ ----------------------------
6
+
7
+ This is a security-only release, with only a minimal code change to prevent a
8
+ read-past-the-end memory error, of arbitrary length. An attacker-controlled
9
+ regex pattern is required, and it cannot be triggered by providing crafted
10
+ subject (match) text. The (*ACCEPT) and (*scs:) pattern features must be used
11
+ together.
12
+
13
+ Release 10.44 and earlier are not affected.
14
+
15
+ This could have implications of denial-of-service or information disclosure,
16
+ and could potentially be used to escalate other vulnerabilities in a system
17
+ (such as information disclosure being used to escalate the severity of an
18
+ unrelated bug in another system).
19
+
20
+
4
21
Version 10.45 05-February-2025
5
22
------------------------------
6
23
Original file line number Diff line number Diff line change @@ -9,9 +9,9 @@ dnl The PCRE2_PRERELEASE feature is for identifying release candidates. It might
9
9
dnl be defined as -RC2, for example. For real releases, it should be empty.
10
10
11
11
m4_define ( pcre2_major , [ 10] )
12
- m4_define ( pcre2_minor , [ 45 ] )
12
+ m4_define ( pcre2_minor , [ 46 ] )
13
13
m4_define ( pcre2_prerelease , [ ] )
14
- m4_define ( pcre2_date , [ 2025-02-05 ] )
14
+ m4_define ( pcre2_date , [ 2025-08-27 ] )
15
15
16
16
# Libtool shared library interface versions (current:revision:age)
17
17
m4_define ( libpcre2_8_version , [ 14:0:14] )
You can’t perform that action at this time.
0 commit comments