Re: JIT buffer overflow fixed in libpcre2-10.49
A mailing-list reply points to the GitHub advisory for a JIT buffer overflow fixed in libpcre2 10.49.
An oss-security reply concerns a JIT buffer overflow that was fixed in libpcre2 10.49. The message says the plaintext description is available from GitHub security advisory GHSA-r9hj-j2rw-4q3m and suggests rendering its Markdown to plain text. The post itself provides no CVE identifier, affected-version range, or statement that the flaw is being exploited.
- The subject concerns a JIT buffer overflow fixed in libpcre2 10.49.
- The reply points readers to GitHub advisory GHSA-r9hj-j2rw-4q3m.
- No CVE identifier or observed exploitation is stated in the post.
- Vendors
- PCRE2Project
- Organizations
- PCRE2Project
From the original article
Posted by Gabriel Ravier on Sep 30 I believe that `gh api repos/PCRE2Project/pcre2/security-advisories/GHSA-r9hj-j2rw-4q3m --jq . description` would give you the plaintext advistory. It is Markdown though - if you want literal plaintext plaintext I guess piping the output of `gh api [etc.]
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.