Description
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 alpine v3.18 | | =10.21-r0 || =10.22-r0 || =10.23-r0 || =10.23-r1 || =10.30-r0 || =10.31-r0 || =10.32-r0 || =10.32-r1 || =10.32-r2 || =10.33-r0 || =10.34-r0 || =10.34-r1 || =10.35-r0 || =10.35-r1 || =10.36-r0 || =10.37-r0 || =10.38-r0 || =10.38-r1 || =10.39-r0 || >=0 <10.40-r0 | 10.40-r0 |
alpine v3.22 | | =10.21-r0 || =10.22-r0 || =10.23-r0 || =10.23-r1 || =10.30-r0 || =10.31-r0 || =10.32-r0 || =10.32-r1 || =10.32-r2 || =10.33-r0 || =10.34-r0 || =10.34-r1 || =10.35-r0 || =10.35-r1 || =10.36-r0 || =10.37-r0 || =10.38-r0 || =10.38-r1 || =10.39-r0 || >=0 <10.40-r0 | 10.40-r0 |
 debian 14 | | | 10.40-1 |
alpine v3.13 | | =10.21-r0 || =10.22-r0 || =10.23-r0 || =10.23-r1 || =10.30-r0 || =10.31-r0 || =10.32-r0 || =10.32-r1 || =10.32-r2 || =10.33-r0 || =10.34-r0 || =10.34-r1 || =10.35-r0 || =10.35-r1 || =10.36-r0 || >=0 <10.36-r1 | 10.36-r1 |
alpine v3.14 | | =10.21-r0 || =10.22-r0 || =10.23-r0 || =10.23-r1 || =10.30-r0 || =10.31-r0 || =10.32-r0 || =10.32-r1 || =10.32-r2 || =10.33-r0 || =10.34-r0 || =10.34-r1 || =10.35-r0 || =10.35-r1 || =10.36-r0 || >=0 <10.36-r1 | 10.36-r1 |
alpine v3.15 | | =10.21-r0 || =10.22-r0 || =10.23-r0 || =10.23-r1 || =10.30-r0 || =10.31-r0 || =10.32-r0 || =10.32-r1 || =10.32-r2 || =10.33-r0 || =10.34-r0 || =10.34-r1 || =10.35-r0 || =10.35-r1 || =10.36-r0 || =10.37-r0 || =10.38-r0 || =10.38-r1 || =10.39-r0 || >=0 <10.40-r0 | 10.40-r0 |
alpine v3.16 | | =10.21-r0 || =10.22-r0 || =10.23-r0 || =10.23-r1 || =10.30-r0 || =10.31-r0 || =10.32-r0 || =10.32-r1 || =10.32-r2 || =10.33-r0 || =10.34-r0 || =10.34-r1 || =10.35-r0 || =10.35-r1 || =10.36-r0 || =10.37-r0 || =10.38-r0 || =10.38-r1 || =10.39-r0 || >=0 <10.40-r0 | 10.40-r0 |
alpine v3.17 | | =10.21-r0 || =10.22-r0 || =10.23-r0 || =10.23-r1 || =10.30-r0 || =10.31-r0 || =10.32-r0 || =10.32-r1 || =10.32-r2 || =10.33-r0 || =10.34-r0 || =10.34-r1 || =10.35-r0 || =10.35-r1 || =10.36-r0 || =10.37-r0 || =10.38-r0 || =10.38-r1 || =10.39-r0 || >=0 <10.40-r0 | 10.40-r0 |
alpine v3.19 | | =10.21-r0 || =10.22-r0 || =10.23-r0 || =10.23-r1 || =10.30-r0 || =10.31-r0 || =10.32-r0 || =10.32-r1 || =10.32-r2 || =10.33-r0 || =10.34-r0 || =10.34-r1 || =10.35-r0 || =10.35-r1 || =10.36-r0 || =10.37-r0 || =10.38-r0 || =10.38-r1 || =10.39-r0 || >=0 <10.40-r0 | 10.40-r0 |
alpine v3.20 | | =10.21-r0 || =10.22-r0 || =10.23-r0 || =10.23-r1 || =10.30-r0 || =10.31-r0 || =10.32-r0 || =10.32-r1 || =10.32-r2 || =10.33-r0 || =10.34-r0 || =10.34-r1 || =10.35-r0 || =10.35-r1 || =10.36-r0 || =10.37-r0 || =10.38-r0 || =10.38-r1 || =10.39-r0 || >=0 <10.40-r0 | 10.40-r0 |
