Skip to content

updates

Pre-release
Pre-release

Choose a tag to compare

@cyberducttape cyberducttape released this 22 Sep 03:18
· 835 commits to main since this release
security: Pin libpcre2-8-0 to patched version to fix CVE vulnerabilities

Explicitly install libpcre2-8-0=10.42-1+deb12u1 to resolve HIGH severity CVEs:
- CVE-2026-86145: Out-of-bounds write allows arbitrary code execution
- CVE-2026-89157: Out-of-bounds write via large pattern input
- CVE-2026-89161: Memory corruption in pcre2_jit_match

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>