Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Oracle Linux 7 ELSA-2016-1025 Critical: PCRE Buffer Overflow

oracle
Calendar Grey May 11, 2016
Oracle Linux Logo Esm H88
Crucial safety patch released for Oracle Linux targeting numerous buffer and stack overflow vulnerabilities.
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

Summary

[8.32-15.1] - Fix CVE-2015-2328 (infinite recursion compiling pattern with recursive reference in a group with indefinite repeat) (bug #1330508) - Fix CVE-2015-8385 (buffer overflow caused by named forward reference to duplicate group number) (bug #1330508) - Fix CVE-2015-8386 (buffer overflow caused by lookbehind assertion) (bug #1330508) - Fix CVE-2015-3217 (stack overflow caused by mishandled group empty match) (bug #1330508) - Fix CVE-2015-5073 and CVE-2015-8388 (buffer overflow for forward reference within backward assertion with excess closing parenthesis) (bug #1330508) - Fix CVE-2015-8391 (inefficient posix character class syntax check) (bug #1330508) - Fix CVE-2016-3191 (workspace overflow for (*ACCEPT) with deeply nested parentheses) (bug #1330508)

Topics%20covered

Topics Covered

security advisory buffer overflow critical patch stack overflow PCRE update Oracle Linux

SRPMs

https://oss.oracle.com:443/ol7/SRPMS-updates/pcre-8.32-15.el7_2.1.src.rpm

x86_64

pcre-8.32-15.el7_2.1.i686.rpm pcre-8.32-15.el7_2.1.x86_64.rpm pcre-devel-8.32-15.el7_2.1.i686.rpm pcre-devel-8.32-15.el7_2.1.x86_64.rpm pcre-static-8.32-15.el7_2.1.i686.rpm pcre-static-8.32-15.el7_2.1.x86_64.rpm pcre-tools-8.32-15.el7_2.1.x86_64.rpm

aarch64

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory buffer overflow critical patch stack overflow PCRE update Oracle Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here