Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 541
Alerts This Week
Warning Icon 1 541

Fedora 22 FEDORA-2016-f59a8ff5d0 Critical: Heap Overflow Fix

fedora
Calendar Grey February 17, 2016
Dist Fedora Esm H88
Examine the recent Fedora 22 security patch for mingw-pcre combating heap and buffer overflow vulnerabilities to ensure system protection.
Update to 8.38 and fix various CVE's

Summary

Cross compiled Perl-compatible regular expression library for use with mingw32.

PCRE has its own native API, but a set of "wrapper" functions that are based on

the POSIX API are also supplied in the library libpcreposix. Note that this

just provides a POSIX calling interface to PCRE: the regular expressions

themselves still follow Perl syntax and semantics. The header file

for the POSIX-style functions is called pcreposix.h.

Update Information:

Update to 8.38 and fix various CVE's

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical update information heap overflow mingw-pcre

Change Log

References


[ 1 ] Bug #1236660 - CVE-2015-3210 mingw-pcre: pcre: heap buffer overflow in pcre_compile2() / compile_regex() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1236660 [ 2 ] Bug #1237225 - CVE-2015-5073 mingw-pcre: pcre: heap buffer overflow in find_fixedlength() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1237225 [ 3 ] Bug #1249905 - mingw-pcre: php: Regular Expression Uninitialized Pointer Information Disclosure Vulnerability (ZDI-CAN-2547) [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1249905 [ 4 ] Bug #1250947 - mingw-pcre: pcre: heap buffer overflow with a crafted regular expression [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1250947 [ 5 ] Bug #1256453 - mingw-pcre: pcre: Heap Overflow in compile_regex() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1256453 [ 6 ] Bug #1287616 - CVE-2015-8383 mingw-pcre: pcre: Buffer overflow caused by repeated conditional group [fedora-al...

Read the Full Advisory

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update mingw-pcre' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: mingw-pcre
Product: Fedora 22
Version: 8.38
Release: 1.fc22
URL: /
Summary: MinGW Windows pcre library

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical update information heap overflow mingw-pcre

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.