Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Slackware: SSA:2023-210-10 Moderate: Pcre Security Update Released

slackware
Calendar Grey July 29, 2008
Scroller Slackware
Latest pcre enhancements bolster Slackware's defenses by addressing a vulnerability, vital for overall system integrity.
New pcre packages are available for Slackware 12.0, 12.1, and -current to fix a security issue

Summary

Here are the details from the Slackware 12.1 ChangeLog: patches/packages/pcre-7.7-i486-1_slack12.1.tgz: Upgraded to pcre-7.7. Tavis Ormandy of the Google Security Team found a buffer overflow triggered when handling certain regular expressions. This could lead to a crash or possible execution of code as the user of the PCRE-linked application. For more information, see: https://www.cve.org/CVERecord?id=CVE-2008-2371 (* Security fix *)

Topics%20covered

Topics Covered

security advisory buffer overflow software update moderate severity slackware crash exploit pcre

Where Find New Packages

HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating additional FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 12.0: ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/pcre-7.7-i486-1_slack12.0.tgz
Updated package for Slackware 12.1: ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/pcre-7.7-i486-1_slack12.1.tgz
Updated package for Slackware -current:

MD5 Signatures

Slackware 12.0 package: 30bf87a8e58d7dc8ece0df73ddbd1aec pcre-7.7-i486-1_slack12.0.tgz
Slackware 12.1 package: a7d990fa0b1ff0c5eddc4592ee53bc72 pcre-7.7-i486-1_slack12.1.tgz
Slackware -current package: feb0296bd7135808d4ed987204234f73 pcre-7.7-i486-1.tgz

Topics%20covered

Topics Covered

security advisory buffer overflow software update moderate severity slackware crash exploit pcre

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg pcre-7.7-i486-1_slack12.1.tgz