Issued:

2013-06-25

Updated:

2013-11-20

RHBA-2013:0977 - grep bug fix update

Synopsis

grep bug fix update

Type/Severity

Bug Fix Advisory

Topic

Updated grep packages that fix several bugs are now available for Red Hat Enterprise Linux 6.

Description

The grep utility searches through textual input for lines which contain a match to a specified pattern and then prints the matching lines. GNU grep utilities include grep, egrep and fgrep.

This update fixes the following bugs:

• For some regular expressions, the DFA analysis could insert up to double "positions" than there were leaves. Consequently, there were not enough room to insert all the positions and grep could terminate unexpectedly on certain regular expressions. To fix this problem, space allocation has been increased and grep works as expected in the described scenario. (BZ#715295)

• When a fixed string pattern was empty while the case-insensitive search was active, grep could terminate unexpectedly. With this update, the check for this case has been added to the code and grep works as expected in the described scenario. (BZ#797934)

• Previously, the code handling case-insensitive searches could alter a string's byte size while converting it to lower case. Consequently, grep could truncate certain output strings. To fix this bug, the grep code has been modified to correctly handle such cases when the byte size gets altered during the conversion to lower case. As a result, case-insensitive searches work correctly and grep no longer truncates its output. (BZ#826997)

Users of grep are advised to upgrade to these updated packages, which fix these bugs.

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

Affected Products

Updated Packages

• grep-2.6.3-4.el6.src.rpm
• grep-2.6.3-4.el6.ppc64.rpm
• grep-debuginfo-2.6.3-4.el6.i686.rpm
• grep-debuginfo-2.6.3-4.el6.ppc64.rpm
• grep-debuginfo-2.6.3-4.el6.s390x.rpm
• grep-2.6.3-4.el6.x86_64.rpm
• grep-2.6.3-4.el6.s390x.rpm
• grep-2.6.3-4.el6.i686.rpm
• grep-debuginfo-2.6.3-4.el6.x86_64.rpm

Fixes

• This content is not included.BZ - 715295
• This content is not included.BZ - 826997

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.