[ glsa 202006-16 ] pcre2

[GLSA]

Gentoo Linux Security Advisory

Title: PCRE2: Denial of service (GLSA 202006-16)
Severity: normal
Exploitable: local, remote
Date: 2020-06-15
Bug(s): #717800
ID: 202006-16

Synopsis

A vulnerability in PCRE2 could lead to a Denial of Service
condition.


Background

PCRE2 is a project based on PCRE (Perl Compatible Regular Expressions)
which has a new and revised API.


Affected Packages

Package: net-libs/pcre2
Vulnerable: < 10.34
Unaffected: >= 10.34
Architectures: All supported architectures


Description

PCRE2 has a flaw when handling JIT-compiled regex using the X pattern.

Impact

An attacker could cause a possible Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All PCRE2 users should upgrade to the latest version: