Summary
[8.42-6]
- Rebuild for BZ#1954441
[8.42-5]
- Fix CVE-2019-20838 (a subject buffer overread in JIT when UTF is disabled
and \X or \R has a greater than 1 fixed quantifier) (bug #1852252)
- Fix CVE-2020-14155 (an integer overflow when parsing numbers after '(?C'))
(bug #1851552)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | pcre | 0:8.42-6.el8 |
| Oracle Linux · 8 | pcre-cpp | 0:8.42-6.el8 |
| Oracle Linux · 8 | pcre-devel | 0:8.42-6.el8 |
| Oracle Linux · 8 | pcre-static | 0:8.42-6.el8 |
| Oracle Linux · 8 | pcre-utf16 | 0:8.42-6.el8 |
| Oracle Linux · 8 | pcre-utf32 | 0:8.42-6.el8 |
Vulnerabilities 2
-
Unscored —
libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than o…
-
Unscored —
libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.