Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

SUSE: 2021:509-1 Moderate: pcre Denial Of Service Issue

suse
Calendar Grey November 16, 2021
Dist Suse Esm H88
Release note for SUSE Container suse/sles12sp4 incorporates key security fixes addressing multiple vulnerabilities.
The container suse/sles12sp4 was updated

Summary

Advisory ID: SUSE-SU-2021:3652-1 Released: Wed Nov 10 17:41:22 2021 Summary: Security update for pcre Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory moderate denial of service suse pcre

References

References : 1025709 1030066 1030803 1030805 1030807 1172973 1172974 CVE-2017-6004

CVE-2017-7186 CVE-2017-7244 CVE-2017-7245 CVE-2017-7246 CVE-2019-20838

CVE-2020-14155

1025709,1030066,1030803,1030805,1030807,1172973,1172974,CVE-2017-6004,CVE-2017-7186,CVE-2017-7244,CVE-2017-7245,CVE-2017-7246,CVE-2019-20838,CVE-2020-14155

This update for pcre fixes the following issues:

Update pcre to version 8.45:

- CVE-2020-14155: Fixed integer overflow via a large number after a '(?C' substring (bsc#1172974).

- CVE-2019-20838: Fixed buffer over-read in JIT compiler (bsc#1172973).

- CVE-2017-7244: Fixed invalid read in _pcre32_xclass() (bsc#1030807).

- CVE-2017-7245: Fixed buffer overflow in the pcre32_copy_substring (bsc#1030805).

Container Advisory ID : SUSE-CU-2021:509-1
Container Tags : suse/sles12sp4:26.374 , suse/sles12sp4:latest
Container Release : 26.374
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate denial of service suse pcre

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here