Alerts This Week
Warning Icon 1 1,149
Alerts This Week
Warning Icon 1 1,149

Red Hat: RHSA-2007:1065-01 Moderate: PCRE Regular Expression Flaw

red hat
Calendar Grey November 29, 2007
Dist Redhat Esm H88
The recent security notice from Red Hat outlines issues related to vulnerabilities in PCRE regular expressions, offering patched versions for Enterprise Linux users.
Updated pcre packages that resolve several security issues are now available for Red Hat Enterprise Linux 2.1

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at

5. Bug IDs fixed (https://bugzilla.redhat.com/):

315881 - CVE-2007-1660 pcre regular expression flaws 383371 - CVE-2006-7228 pcre integer overflow

6. RPMs required:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 :

SRPMS: b022b4a160b9ae10502caf8f7f41e3df pcre-3.4-2.4.src.rpm

i386: 93b438935eef79a4694bce231c88677d pcre-3.4-2.4.i386.rpm ba0028614c709b8890fa2df7f943a6ec pcre-devel-3.4-2.4.i386.rpm

ia64: cdcd3056392e75214d16493b9e3a5cf5 pcre-3.4-2.4.ia64.rpm bb8cf92b2f4f9a24653116e027a5ee2a pcre-devel-3.4-2.4.ia64.rpm

Red Hat Linux Advanced Workstation 2.1:

SRPMS: b022b4a160b9ae10502caf8f7f41e3df pcre-3.4-2.4.src.rpm

ia64: cdcd3056392e75214d16493b9e3a5cf5 pcre-3.4-2.4.ia64.rpm bb8cf92b2f4f9a24653116e027a5ee2a pcre-devel-3.4-2.4.ia64.rpm

Red Hat Enterprise Linux ES version 2.1:

SRPMS: b022b4a160b9ae10502caf8f7f41e3df pcre-3.4-2.4.src.rpm

i386: 93b438935eef79a4694bce231c88677d pcre-3.4-2.4.i386.rpm ba0028614c709b8890fa2df7f943a6ec pcre-devel-3.4-2.4.i386.rpm

Red Hat Enterprise Linux WS version 2.1:

SRPMS: b022b4a160b9ae10502caf8f7f41e3df pcre-3.4-2.4.src.rpm

i386: 93b438935eef79a4694bce231c88677d pcre-3.4-2.4.i386.rpm ba0028614c709b8890fa2df7f943a6ec pcre-devel-3.4-2.4.i386.rpm

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package

Summary

References

https://www.cve.org/CVERecord?id=CVE-2006-7228 https://www.cve.org/CVERecord?id=CVE-2007-1660 https://access.redhat.com/security/updates/classification#moderate

Package List


Advisory ID: RHSA-2007:1065-01
Issue date: 2007-11-29
Updated on: 2007-11-29
Product: Red Hat Enterprise Linux

Topic

Relevant Releases Architectures

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64

Red Hat Linux Advanced Workstation 2.1 - ia64

Red Hat Enterprise Linux ES version 2.1 - i386

Red Hat Enterprise Linux WS version 2.1 - i386

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here