Skip to content
OpenAdvisories
Low ELSA-2015-2111 1 CVE

Low: grep security and bug fix update (Oracle Linux 7)

Published Nov 23, 2015 · Updated Nov 23, 2015

Summary

[2.20-2]
- Fixed invalid UTF-8 byte sequence error in PCRE mode
(by pcre-backported-fixes patch)
Resolves: rhbz#1217080
- Fixed buffer overrun for grep -F
Resolves: CVE-2015-1345
- Fixed \w and \W behaviour in multibyte locales
Resolves: rhbz#1159012
- Documented --fixed-regexp option
Resolves: rhbz#1103259
- Updated pcre buildrequires to require pcre-devel >= 7.8-7
Related: rhbz#1217080

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 grep 0:2.20-2.el7

Vulnerabilities 1

  • Unscored —

    The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-…