Skip to content
OpenAdvisories
Unscored RHSA-2016:1025 8 CVEs

Red Hat Security Advisory: pcre security update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client pcre 0:8.32-15.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::client pcre-debuginfo 0:8.32-15.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::client pcre-devel 0:8.32-15.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::client pcre-static 0:8.32-15.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::client pcre-tools 0:8.32-15.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::computenode pcre 0:8.32-15.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::computenode pcre-debuginfo 0:8.32-15.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::computenode pcre-devel 0:8.32-15.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::computenode pcre-static 0:8.32-15.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::computenode pcre-tools 0:8.32-15.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::server pcre 0:8.32-15.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::server pcre-debuginfo 0:8.32-15.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::server pcre-devel 0:8.32-15.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::server pcre-static 0:8.32-15.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::server pcre-tools 0:8.32-15.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::workstation pcre 0:8.32-15.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::workstation pcre-debuginfo 0:8.32-15.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::workstation pcre-devel 0:8.32-15.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::workstation pcre-static 0:8.32-15.el7_2.1
Red Hat · RHEL 7 enterprise_linux:7::workstation pcre-tools 0:8.32-15.el7_2.1

Vulnerabilities 8

  • Unscored —
    CVE-2015-2328

    PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows rem…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-3217

    PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to ca…

    pcre3 Debian
  • Unscored —
    CVE-2015-5073

    Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attacke…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8385

    PCRE before 8.38 mishandles the /(?|(\k'Pm')|(?'Pm'))/ pattern and related patterns with certain forward references, wh…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8386

    PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows r…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8388

    PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing paren…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2015-8391

    The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote atta…

    pcre3 pcre3 Debian Ubuntu
  • Unscored —
    CVE-2016-3191

    The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishand…

    pcre3 pcre3 pcre2 pcre Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1228283
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1237223
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1285399
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1287629
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1287636
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1287671
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1311503
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1025.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-2328
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-2328
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-2328
  • report
    https://access.redhat.com/security/cve/CVE-2015-3217
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3217
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3217
  • report
    https://access.redhat.com/security/cve/CVE-2015-5073
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5073
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5073
  • report
    https://access.redhat.com/security/cve/CVE-2015-8385
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-8385
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-8385
  • report
    https://access.redhat.com/security/cve/CVE-2015-8386
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-8386
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-8386
  • report
    https://access.redhat.com/security/cve/CVE-2015-8388
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-8388
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-8388
  • report
    https://access.redhat.com/security/cve/CVE-2015-8391
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-8391
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-8391
  • report
    https://access.redhat.com/security/cve/CVE-2016-3191
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-3191
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-3191