Recommended update for pcre2 SUSE Patch security@suse.de SUSE Security Team SUSE-RU-2022:1883-1 Final 1 1 2022-05-30T10:41:56Z current 2022-05-30T10:41:56Z 2022-05-30T10:41:56Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Recommended update for pcre2 This update for pcre2 fixes the following issues: - CVE-2022-1586: Fixed out-of-bounds read via missing Unicode property matching issue in JIT compiled regular expressions (bsc#1199232). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/bci-init:15.3-2022-1883,Container bci/golang:1.16-2022-1883,Container bci/golang:1.17-2022-1883,Container bci/golang:latest-2022-1883,Container bci/node:12-2022-1883,Container bci/node:14-2022-1883,Container bci/nodejs:latest-2022-1883,Container bci/openjdk-devel:11-2022-1883,Container bci/python:3-2022-1883,Container bci/ruby:latest-2022-1883,Container ses/7.1/ceph/haproxy:latest-2022-1883,Container ses/7.1/ceph/keepalived:latest-2022-1883,Container ses/7.1/cephcsi/cephcsi:latest-2022-1883,Container ses/7.1/rook/ceph:latest-2022-1883,Container suse/sle-micro-rancher/5.2:latest-2022-1883,Container trento/trento-db:latest-2022-1883,Image SLES15-SP3-BYOS-Azure-2022-1883,Image SLES15-SP3-BYOS-EC2-HVM-2022-1883,Image SLES15-SP3-BYOS-GCE-2022-1883,Image SLES15-SP3-CHOST-BYOS-Aliyun-2022-1883,Image SLES15-SP3-CHOST-BYOS-Azure-2022-1883,Image SLES15-SP3-CHOST-BYOS-EC2-2022-1883,Image SLES15-SP3-CHOST-BYOS-GCE-2022-1883,Image SLES15-SP3-CHOST-BYOS-SAP-CCloud-2022-1883,Image SLES15-SP3-HPC-BYOS-Azure-2022-1883,Image SLES15-SP3-HPC-BYOS-EC2-HVM-2022-1883,Image SLES15-SP3-HPC-BYOS-GCE-2022-1883,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure-2022-1883,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM-2022-1883,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE-2022-1883,Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure-2022-1883,Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM-2022-1883,Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE-2022-1883,Image SLES15-SP3-Micro-5-1-BYOS-Azure-2022-1883,Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM-2022-1883,Image SLES15-SP3-Micro-5-1-BYOS-GCE-2022-1883,Image SLES15-SP3-Micro-5-2-BYOS-Azure-2022-1883,Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM-2022-1883,Image SLES15-SP3-Micro-5-2-BYOS-GCE-2022-1883,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2022-1883,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2022-1883,Image SLES15-SP3-SAP-BYOS-Azure-2022-1883,Image SLES15-SP3-SAP-BYOS-EC2-HVM-2022-1883,Image SLES15-SP3-SAP-BYOS-GCE-2022-1883,Image SLES15-SP3-SAPCAL-Azure-2022-1883,Image SLES15-SP3-SAPCAL-EC2-HVM-2022-1883,Image SLES15-SP3-SAPCAL-GCE-2022-1883,SUSE-2022-1883,openSUSE-SLE-15.4-2022-1883 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/-2022-1883/suse-ru-20221883-1/ Link for SUSE-RU-2022:1883-1 https://lists.suse.com/pipermail/sle-updates/2022-May/023385.html E-Mail link for SUSE-RU-2022:1883-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1199232 SUSE Bug 1199232 https://www.suse.com/security/cve/CVE-2022-1586/ SUSE CVE CVE-2022-1586 page Container bci/bci-init:15.3 Container bci/golang:1.16 Container bci/golang:1.17 Container bci/golang:latest Container bci/node:12 Container bci/node:14 Container bci/nodejs:latest Container bci/openjdk-devel:11 Container bci/python:3 Container bci/ruby:latest Container ses/7.1/ceph/haproxy:latest Container ses/7.1/ceph/keepalived:latest Container ses/7.1/cephcsi/cephcsi:latest Container ses/7.1/rook/ceph:latest Container suse/sle-micro-rancher/5.2:latest Container trento/trento-db:latest Image SLES15-SP3-BYOS-Azure Image SLES15-SP3-BYOS-EC2-HVM Image SLES15-SP3-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-Aliyun Image SLES15-SP3-CHOST-BYOS-Azure Image SLES15-SP3-CHOST-BYOS-EC2 Image SLES15-SP3-CHOST-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-SAP-CCloud Image SLES15-SP3-HPC-BYOS-Azure Image SLES15-SP3-HPC-BYOS-EC2-HVM Image SLES15-SP3-HPC-BYOS-GCE Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE Image SLES15-SP3-Micro-5-1-BYOS-Azure Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-1-BYOS-GCE Image SLES15-SP3-Micro-5-2-BYOS-Azure Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-2-BYOS-GCE Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-SAP-BYOS-Azure Image SLES15-SP3-SAP-BYOS-EC2-HVM Image SLES15-SP3-SAP-BYOS-GCE Image SLES15-SP3-SAPCAL-Azure Image SLES15-SP3-SAPCAL-EC2-HVM Image SLES15-SP3-SAPCAL-GCE openSUSE Leap 15.4 libpcre2-8-0-10.31-150000.3.7.1 libpcre2-16-0-10.31-150000.3.7.1 libpcre2-16-0-32bit-10.31-150000.3.7.1 libpcre2-16-0-64bit-10.31-150000.3.7.1 libpcre2-32-0-10.31-150000.3.7.1 libpcre2-32-0-32bit-10.31-150000.3.7.1 libpcre2-32-0-64bit-10.31-150000.3.7.1 libpcre2-8-0-32bit-10.31-150000.3.7.1 libpcre2-8-0-64bit-10.31-150000.3.7.1 libpcre2-posix2-10.31-150000.3.7.1 libpcre2-posix2-32bit-10.31-150000.3.7.1 libpcre2-posix2-64bit-10.31-150000.3.7.1 pcre2-devel-10.31-150000.3.7.1 pcre2-devel-static-10.31-150000.3.7.1 pcre2-doc-10.31-150000.3.7.1 pcre2-tools-10.31-150000.3.7.1 libpcre2-8-0-10.31-150000.3.7.1 as a component of Container bci/bci-init:15.3 libpcre2-8-0-10.31-150000.3.7.1 as a component of Container bci/golang:1.16 libpcre2-8-0-10.31-150000.3.7.1 as a component of Container bci/golang:1.17 libpcre2-8-0-10.31-150000.3.7.1 as a component of Container bci/golang:latest libpcre2-8-0-10.31-150000.3.7.1 as a component of Container bci/node:12 libpcre2-8-0-10.31-150000.3.7.1 as a component of Container bci/node:14 libpcre2-8-0-10.31-150000.3.7.1 as a component of Container bci/nodejs:latest libpcre2-8-0-10.31-150000.3.7.1 as a component of Container bci/openjdk-devel:11 libpcre2-8-0-10.31-150000.3.7.1 as a component of Container bci/python:3 libpcre2-8-0-10.31-150000.3.7.1 as a component of Container bci/ruby:latest libpcre2-8-0-10.31-150000.3.7.1 as a component of Container ses/7.1/ceph/haproxy:latest libpcre2-8-0-10.31-150000.3.7.1 as a component of Container ses/7.1/ceph/keepalived:latest libpcre2-8-0-10.31-150000.3.7.1 as a component of Container ses/7.1/cephcsi/cephcsi:latest libpcre2-8-0-10.31-150000.3.7.1 as a component of Container ses/7.1/rook/ceph:latest libpcre2-8-0-10.31-150000.3.7.1 as a component of Container suse/sle-micro-rancher/5.2:latest libpcre2-8-0-10.31-150000.3.7.1 as a component of Container trento/trento-db:latest libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-BYOS-Azure libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-BYOS-EC2-HVM libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-BYOS-GCE libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-CHOST-BYOS-Aliyun libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-CHOST-BYOS-Azure libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-CHOST-BYOS-EC2 libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-CHOST-BYOS-GCE libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-CHOST-BYOS-SAP-CCloud libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-HPC-BYOS-Azure libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-HPC-BYOS-EC2-HVM libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-HPC-BYOS-GCE libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-Azure libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-GCE libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-Azure libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-GCE libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production libpcre2-16-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure libpcre2-16-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM libpcre2-16-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-SAPCAL-Azure libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM libpcre2-8-0-10.31-150000.3.7.1 as a component of Image SLES15-SP3-SAPCAL-GCE libpcre2-16-0-10.31-150000.3.7.1 as a component of openSUSE Leap 15.4 libpcre2-16-0-32bit-10.31-150000.3.7.1 as a component of openSUSE Leap 15.4 libpcre2-32-0-10.31-150000.3.7.1 as a component of openSUSE Leap 15.4 libpcre2-32-0-32bit-10.31-150000.3.7.1 as a component of openSUSE Leap 15.4 libpcre2-8-0-10.31-150000.3.7.1 as a component of openSUSE Leap 15.4 libpcre2-8-0-32bit-10.31-150000.3.7.1 as a component of openSUSE Leap 15.4 libpcre2-posix2-10.31-150000.3.7.1 as a component of openSUSE Leap 15.4 libpcre2-posix2-32bit-10.31-150000.3.7.1 as a component of openSUSE Leap 15.4 pcre2-devel-10.31-150000.3.7.1 as a component of openSUSE Leap 15.4 pcre2-devel-static-10.31-150000.3.7.1 as a component of openSUSE Leap 15.4 pcre2-doc-10.31-150000.3.7.1 as a component of openSUSE Leap 15.4 pcre2-tools-10.31-150000.3.7.1 as a component of openSUSE Leap 15.4 An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT. CVE-2022-1586 Container bci/bci-init:15.3:libpcre2-8-0-10.31-150000.3.7.1 Container bci/golang:1.16:libpcre2-8-0-10.31-150000.3.7.1 Container bci/golang:1.17:libpcre2-8-0-10.31-150000.3.7.1 Container bci/golang:latest:libpcre2-8-0-10.31-150000.3.7.1 Container bci/node:12:libpcre2-8-0-10.31-150000.3.7.1 Container bci/node:14:libpcre2-8-0-10.31-150000.3.7.1 Container bci/nodejs:latest:libpcre2-8-0-10.31-150000.3.7.1 Container bci/openjdk-devel:11:libpcre2-8-0-10.31-150000.3.7.1 Container bci/python:3:libpcre2-8-0-10.31-150000.3.7.1 Container bci/ruby:latest:libpcre2-8-0-10.31-150000.3.7.1 Container ses/7.1/ceph/haproxy:latest:libpcre2-8-0-10.31-150000.3.7.1 Container ses/7.1/ceph/keepalived:latest:libpcre2-8-0-10.31-150000.3.7.1 Container ses/7.1/cephcsi/cephcsi:latest:libpcre2-8-0-10.31-150000.3.7.1 Container ses/7.1/rook/ceph:latest:libpcre2-8-0-10.31-150000.3.7.1 Container suse/sle-micro-rancher/5.2:latest:libpcre2-8-0-10.31-150000.3.7.1 Container trento/trento-db:latest:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-BYOS-Azure:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-BYOS-EC2-HVM:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-BYOS-GCE:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-CHOST-BYOS-Aliyun:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-CHOST-BYOS-Azure:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-CHOST-BYOS-EC2:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-CHOST-BYOS-GCE:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-HPC-BYOS-Azure:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-HPC-BYOS-GCE:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-SAP-BYOS-Azure:libpcre2-16-0-10.31-150000.3.7.1 Image SLES15-SP3-SAP-BYOS-Azure:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:libpcre2-16-0-10.31-150000.3.7.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-SAP-BYOS-GCE:libpcre2-16-0-10.31-150000.3.7.1 Image SLES15-SP3-SAP-BYOS-GCE:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-SAPCAL-Azure:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-SAPCAL-EC2-HVM:libpcre2-8-0-10.31-150000.3.7.1 Image SLES15-SP3-SAPCAL-GCE:libpcre2-8-0-10.31-150000.3.7.1 openSUSE Leap 15.4:libpcre2-16-0-10.31-150000.3.7.1 openSUSE Leap 15.4:libpcre2-16-0-32bit-10.31-150000.3.7.1 openSUSE Leap 15.4:libpcre2-32-0-10.31-150000.3.7.1 openSUSE Leap 15.4:libpcre2-32-0-32bit-10.31-150000.3.7.1 openSUSE Leap 15.4:libpcre2-8-0-10.31-150000.3.7.1 openSUSE Leap 15.4:libpcre2-8-0-32bit-10.31-150000.3.7.1 openSUSE Leap 15.4:libpcre2-posix2-10.31-150000.3.7.1 openSUSE Leap 15.4:libpcre2-posix2-32bit-10.31-150000.3.7.1 openSUSE Leap 15.4:pcre2-devel-10.31-150000.3.7.1 openSUSE Leap 15.4:pcre2-devel-static-10.31-150000.3.7.1 openSUSE Leap 15.4:pcre2-doc-10.31-150000.3.7.1 openSUSE Leap 15.4:pcre2-tools-10.31-150000.3.7.1 important 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/-2022-1883/suse-ru-20221883-1/ https://www.suse.com/security/cve/CVE-2022-1586.html CVE-2022-1586 https://bugzilla.suse.com/1199232 SUSE Bug 1199232 https://bugzilla.suse.com/1203032 SUSE Bug 1203032