tocsin

Debian/pcre2: low 3.3

In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.

Action: Upgrade pcre2 to 10.46-1~deb13u2 or later.

Affected

introducedfixedlast affected
010.46-1~deb13u2-

Fixed versions

10.46-1~deb13u2

Sources

published · modified · JSON