Ubuntu Security Notices
USN-624-2

USN-624-2: Erlang vulnerability

Publication date

9 April 2010

Overview

Erlang vulnerability

Releases

9.10

Packages

erlang -

Details

USN-624-1 fixed a vulnerability in PCRE. This update provides the
corresponding update for Erlang.

Original advisory details:

Tavis Ormandy discovered that the PCRE library did not correctly handle
certain in-pattern options. An attacker could cause applications linked
against pcre3 to crash, leading to a denial of service.

USN-624-1 fixed a vulnerability in PCRE. This update provides the
corresponding update for Erlang.

Original advisory details:

Tavis Ormandy discovered that the PCRE library did not correctly handle
certain in-pattern options. An attacker could cause applications linked
against pcre3 to crash, leading to a denial of service.

Update instructions

In general, a standard system upgrade is sufficient to effect the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release	Package Version
9.10 karmic	erlang-base – 1:13.b.1-dfsg-2ubuntu1.1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

CVE-2008-2371

CVE-2008-2371