USN-547-1: PCRE vulnerabilities

Packages

pcre3 -

Details

Tavis Ormandy and Will Drewry discovered multiple flaws in the regular
expression handling of PCRE. By tricking a user or service into running
specially crafted expressions via applications linked against libpcre3,
a remote attacker could crash the application, monopolize CPU resources,
or possibly execute arbitrary code with the application’s privileges.

Update instructions

After a standard system upgrade you need to reboot your computer to effect the necessary changes. Due to the large internal code changes needed to solve outstanding flaws, it was not possible to backport all the upstream security fixes to the earlier released versions. To address this, the pcre3 library has been updated to the latest stable release (7.4), which includes fixes for all known security issues. While the new version is ABI compatible, efforts have been taken to maintain behavioral compatibility with the earlier versions.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
7.10 gutsy	libpcre3 – 7.4-0ubuntu0.7.10.1
7.10 gutsy	libpcrecpp0 – 7.4-0ubuntu0.7.10.1
7.04 feisty	libpcre3 – 7.4-0ubuntu0.7.04.1
7.04 feisty	libpcrecpp0 – 7.4-0ubuntu0.7.04.1
6.10 edgy	libpcre3 – 7.4-0ubuntu0.6.10.1
6.10 edgy	libpcrecpp0 – 7.4-0ubuntu0.6.10.1
6.06 dapper	libpcre3 – 7.4-0ubuntu0.6.06.1
6.06 dapper	libpcrecpp0 – 7.4-0ubuntu0.6.06.1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

Packages

Details

Update instructions

Reduce your security exposure

References