| Description: | Description:
The remote host is missing an update to pcre
announced via advisory FEDORA-2008-1842.
Update Information:
This update re-based pcre to version 7.3 as used in
Fedora 8 to address multiple security issues that cause
memory corruption, leading to application crash or
possible execution of arbitrary code.
This issue may affect usages of pcre, where regular
expressions from untrusted sources are compiled. Handling of
untrusted data using trusted regular expressions is not
affected by these problems.
ChangeLog:
* Tue Feb 12 2008 Tomas Hoger - 7.3-3
- Backport patch from upstream pcre 7.6 to address buffer overflow
caused by a character class containing a very large number of
characters with codepoints greater than 255 (in UTF-8 mode)
CVE-2008-0674, #431660
- Try re-enabling make check again.
References:
[ 1 ] Bug #315871 - CVE-2007-1659 pcre regular expression flaws
https://bugzilla.redhat.com/show_bug.cgi?id=315871
[ 2 ] Bug #392891 - CVE-2007-4766: pcre < 7.3 integer overflows
https://bugzilla.redhat.com/show_bug.cgi?id=392891
[ 3 ] Bug #392901 - CVE-2007-4767: pcre < 7.3 \p, \P, \P{x] length calculation issue
https://bugzilla.redhat.com/show_bug.cgi?id=392901
[ 4 ] Bug #392911 - CVE-2007-4768: pcre before 7.3 incorrect unicode in char class optimization
https://bugzilla.redhat.com/show_bug.cgi?id=392911
[ 5 ] Bug #392921 - CVE-2007-1662: pcre < 7.3 unmatched bracket/paren past EoS read issue
https://bugzilla.redhat.com/show_bug.cgi?id=392921
[ 6 ] Bug #392931 - CVE-2007-1661: pcre < 7.3 non-UTF-8 over-backtracking issue
https://bugzilla.redhat.com/show_bug.cgi?id=392931
[ 7 ] Bug #431660 - pcre: buffer overflow via large UTF-8 character class
https://bugzilla.redhat.com/show_bug.cgi?id=431660
Solution: Apply the appropriate updates.
This update can be installed with the yum update program. Use
su -c 'yum update pcre' at the command line.
For more information, refer to Managing Software with yum,
available at http://docs.fedoraproject.org/yum/.
https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2008-1842
Risk factor : High
CVSS Score:
7.5
|
