GLSA
Advocate
Joined: 12 May 2004
Posts: 2663
|
 Posted: Mon Oct 23, 2017 3:26 am Post subject: [ glsa 201710-25 ] pcre |
 |
|
Gentoo Linux Security Advisory
Title: PCRE: Multiple vulnerabilities (GLSA 201710-25)
Severity: normal
Exploitable: remote
Date: 2017-10-23
Bug(s): #614048, #614052, #614054
ID: 201710-25
Synopsis
Multiple vulnerabilities have been found in the PCRE Library, the
worst of which may allow remote attackers to cause a Denial of Service
condition.
Background
The PCRE Library provides functions for Perl-compatible regular
expressions.
Affected Packages
Package: dev-libs/libpcre
Vulnerable: < 8.41
Unaffected: >= 8.41
Architectures: All supported architectures
Description
Multiple vulnerabilities have been discovered in The PCRE Library.
Please review the references below for details.
Impact
A remote attacker could possibly cause a Denial of Service condition or
other unspecified impacts via a specially crafted file.
Workaround
There is no known workaround at this time.
Resolution
All PCRE users should upgrade to the latest version: | Code: | # emerge --sync
# emerge --ask --oneshot --verbose ">=dev-libs/libpcre-8.41"
|
Packages which depend on this library may need to be recompiled. Tools
such as revdep-rebuild may assist in identifying some of these packages.
References
CVE-2017-7186
CVE-2017-7244
CVE-2017-7245
CVE-2017-7246
Last edited by GLSA on Mon Jan 15, 2018 4:16 am; edited 1 time in total |
|
News & Announcements
