Skip to content
OpenAdvisories
Medium ALSA-2020:4539 1 CVE

Moderate: pcre2 security and enhancement update

Published Nov 3, 2020 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl.

Security Fix(es):

* pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode (CVE-2019-20454)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fixed packages 5

ReleasePackageFixed in
AlmaLinux · 8 pcre2 10.32-2.el8
AlmaLinux · 8 pcre2-devel 10.32-2.el8
AlmaLinux · 8 pcre2-tools 10.32-2.el8
AlmaLinux · 8 pcre2-utf16 10.32-2.el8
AlmaLinux · 8 pcre2-utf32 10.32-2.el8

Vulnerabilities 1

  • Medium 5.1
    CVE-2019-20454

    An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match special…

    pcre2 pcre2 Debian Ubuntu

References

  • report
    https://vulners.com/cve/CVE-2019-20454