Skip to content
OpenAdvisories
Medium ELSA-2020-4539 1 CVE

Moderate: pcre2 security and enhancement update (Oracle Linux 8)

Published Nov 10, 2020 · Updated Nov 10, 2020

Ecosystem: Oracle Linux

Summary

[10.32-2]
- Fix CVE-2019-20454 (a crash when \X is used without UTF mode in a JIT)
(bug #1734468)

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 8 pcre2 0:10.32-2.el8
Oracle Linux · 8 pcre2-devel 0:10.32-2.el8
Oracle Linux · 8 pcre2-tools 0:10.32-2.el8
Oracle Linux · 8 pcre2-utf16 0:10.32-2.el8
Oracle Linux · 8 pcre2-utf32 0:10.32-2.el8

Vulnerabilities 1

  • Medium 5.1
    CVE-2019-20454

    An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match special…

    pcre2 pcre2 Debian Ubuntu