Security
Security
Multiple vulnerabilities have been found in PCRE2, the worst of which could result in arbitrary code execution.
| Package | dev-libs/libpcre2 on all architectures |
|---|---|
| Affected versions | < 10.49 |
| Unaffected versions | >= 10.49 |
PCRE2 is a project based on PCRE (Perl Compatible Regular Expressions) which has a new and revised API.
Multiple vulnerabilities have been discovered in PCRE2. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
Avoid exposing libpcre2 to attacker-controlled regex.
All PCRE2 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/libpcre2-10.49"