Hi Matthew,
On 01/09/2026 14:08, Matthew Vernon wrote:
Hi,
I'm the PCRE2 maintainer. Yesterday's announcement of 10.48 included a
pile of (relatively minor) security fixes. I've spoken with the security
team, and we've agreed that trixie should be done via the next point
release (which I've got a package ready for).
For bookworm (10.42-1) upstream did prepare a set of backported patches
- https://github.com/PCRE2Project/pcre2/compare/main...release/pcre2-10.42
I can make a 10.42-1+deb12u1 if you like, or would you rather take this
yourselves?
Can you upload this to security-master targeting bookworm-security, perhaps
after the trixie update has been submitted? Then we can handle the paperwork
(unless you want to of course).
Cheers,
Emilio
