PCRE2-10.46

This is a security-only release, to address CVE-2025-58050.

Compared to 10.45, this release has only a minimal code change to prevent a read-past-the-end memory error, of arbitrary length. An attacker-controlled regex pattern is required, and it cannot be triggered by providing crafted subject (match) text. The (*ACCEPT) and (*scs:) pattern features must be used together.

Release 10.44 and earlier are not affected.

This could have implications of denial-of-service or information disclosure, and could potentially be used to escalate other vulnerabilities in a system (such as information disclosure being used to escalate the severity of an unrelated bug in another system).

PCRE2-10.45

This is a comparatively large release, incorporating new features, some bugfixes, and a few changes with slight backwards compatibility implications. Please see the NEWS file for further details.

This release is the first to be available as a (signed) Git tag, or alternatively as a (signed) tarball of the Git tag.

This is also the first release to be made by the new maintainers of PCRE2, and we would like to thank Philip Hazel, creator and maintainer of PCRE and PCRE2.

PCRE2-10.45-RC1

This is a comparatively large release, incorporating new features, some bugfixes, and a few changes with slight backwards compatibility implications. Please see the NEWS file for further details.

This is a Release Candidate that is being made available for testing.

PCRE2-10.44

This is mostly a bug-fix and tidy-up release. An explicit limit can now be set on the size of a compiled pattern.

PCRE2-10.43

There are a lot of changes in this release. Those that are not just bugfixes or source tidies are described in the NEWS file and there is more information in ChangeLog. Note that JIT support for Armv5 is withdrawn in this release. There have only been minor changes since 10.43-RC1.

PCRE2-10.43-RC1

There are quite a lot of changes in this release. Those that are not just bugfixes or source tidies are described in the NEWS file. This is a Release Candidate that is being made available for testing.

PCRE2-10.42

This release is mainly to fix a problem with 10.41, which is broken for programs that include pcre2posix.h but not pcre2.h. Some other minor fixes are included.

PCRE2-10.41

Mainly bug fixes and tidies; pcre2grep has been made more like GNU grep for multiple patterns that match more than once on a line.

pcre2-10.40

Mainly a bug-fix release, but also includes an update to Unicode property handling. See NEWS and ChangeLog for details.

pcre2-10.39

This release is mainly to fix an important JIT bug, but it also contains an update to Unicode 14.0.0 and some code and configuration tidies.