SUSE: 2021:509-1 suse/sles12sp4 Security Update
Summary
Advisory ID: SUSE-SU-2021:3652-1 Released: Wed Nov 10 17:41:22 2021 Summary: Security update for pcre Type: security Severity: moderate
References
References : 1025709 1030066 1030803 1030805 1030807 1172973 1172974 CVE-2017-6004
CVE-2017-7186 CVE-2017-7244 CVE-2017-7245 CVE-2017-7246 CVE-2019-20838
CVE-2020-14155
1025709,1030066,1030803,1030805,1030807,1172973,1172974,CVE-2017-6004,CVE-2017-7186,CVE-2017-7244,CVE-2017-7245,CVE-2017-7246,CVE-2019-20838,CVE-2020-14155
This update for pcre fixes the following issues:
Update pcre to version 8.45:
- CVE-2020-14155: Fixed integer overflow via a large number after a '(?C' substring (bsc#1172974).
- CVE-2019-20838: Fixed buffer over-read in JIT compiler (bsc#1172973).
- CVE-2017-7244: Fixed invalid read in _pcre32_xclass() (bsc#1030807).
- CVE-2017-7245: Fixed buffer overflow in the pcre32_copy_substring (bsc#1030805).
- CVE-2017-7246: Fixed another buffer overflow in the pcre32_copy_substring (bsc#1030803).
- CVE-2017-7186: Fixed denial of service caused by an invalid Unicode property lookup (bsc#1030066).
- CVE-2017-6004: Fixed denial of service via crafted regular expression (bsc#1025709).
The following package changes have been done:
- base-container-licenses-3.0-1.249 updated
- libpcre1-8.45-8.7.1 updated