Red Hat Security Advisory

RHSA-2021:4373

pcre security update

Released 2021-11-09 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) pcre-static-8.42-6.el8
Red Hat Enterprise Linux BaseOS (v. 8) pcre-8.42-6.el8, pcre-cpp-8.42-6.el8, pcre-devel-8.42-6.el8 +2

Fixes 2 records

TI-2019-15056 CVE-2019-20838 · GHSA-689f-qv4w-xgqf

libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is…

MEDIUM 44

libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0284 Published 2020-06-15 Partial fix CWE-125

TI-2020-11082 CVE-2020-14155 · GHSA-g6g8-99m5-jj82

libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.

LOW 37

libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04182 Published 2020-06-15 Partial fix CWE-190