Issued:

2016-05-11

Updated:

2016-05-11

RHSA-2016:1025 - Important: pcre security update

Synopsis

Important: pcre security update

Type/Severity

Security Advisory Important

Topic

An update for pcre is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

PCRE is a Perl-compatible regular expression library.

Security Fix(es):

• Multiple flaws were found in the way PCRE handled malformed regular expressions. An attacker able to make an application using PCRE process a specially crafted regular expression could use these flaws to cause the application to crash or, possibly, execute arbitrary code. (CVE-2015-8385, CVE-2016-3191, CVE-2015-2328, CVE-2015-3217, CVE-2015-5073, CVE-2015-8388, CVE-2015-8391, CVE-2015-8386)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

Updated Packages

• pcre-8.32-15.el7_2.1.ppc.rpm
• pcre-tools-8.32-15.el7_2.1.ppc64.rpm
• pcre-devel-8.32-15.el7_2.1.ppc64le.rpm
• pcre-8.32-15.el7_2.1.s390x.rpm
• pcre-debuginfo-8.32-15.el7_2.1.ppc64.rpm
• pcre-static-8.32-15.el7_2.1.s390x.rpm
• pcre-debuginfo-8.32-15.el7_2.1.x86_64.rpm
• pcre-devel-8.32-15.el7_2.1.x86_64.rpm
• pcre-static-8.32-15.el7_2.1.x86_64.rpm
• pcre-debuginfo-8.32-15.el7_2.1.s390x.rpm
• pcre-tools-8.32-15.el7_2.1.ppc64le.rpm
• pcre-8.32-15.el7_2.1.s390.rpm
• pcre-tools-8.32-15.el7_2.1.x86_64.rpm
• pcre-debuginfo-8.32-15.el7_2.1.i686.rpm
• pcre-devel-8.32-15.el7_2.1.ppc.rpm
• pcre-8.32-15.el7_2.1.i686.rpm
• pcre-tools-8.32-15.el7_2.1.s390x.rpm
• pcre-debuginfo-8.32-15.el7_2.1.ppc64le.rpm
• pcre-8.32-15.el7_2.1.x86_64.rpm
• pcre-static-8.32-15.el7_2.1.ppc.rpm
• pcre-static-8.32-15.el7_2.1.ppc64le.rpm
• pcre-8.32-15.el7_2.1.ppc64le.rpm
• pcre-devel-8.32-15.el7_2.1.s390.rpm
• pcre-devel-8.32-15.el7_2.1.i686.rpm
• pcre-8.32-15.el7_2.1.src.rpm
• pcre-debuginfo-8.32-15.el7_2.1.ppc.rpm
• pcre-devel-8.32-15.el7_2.1.ppc64.rpm
• pcre-devel-8.32-15.el7_2.1.s390x.rpm
• pcre-debuginfo-8.32-15.el7_2.1.s390.rpm
• pcre-static-8.32-15.el7_2.1.ppc64.rpm
• pcre-static-8.32-15.el7_2.1.i686.rpm
• pcre-static-8.32-15.el7_2.1.s390.rpm
• pcre-8.32-15.el7_2.1.ppc64.rpm

Fixes

• This content is not included.BZ - 1228283
• This content is not included.BZ - 1237223
• This content is not included.BZ - 1285399
• This content is not included.BZ - 1287629
• This content is not included.BZ - 1287636
• This content is not included.BZ - 1287671
• This content is not included.BZ - 1311503

CVEs

• CVE-2015-2328
• CVE-2015-3217
• CVE-2015-5073
• CVE-2015-8385
• CVE-2015-8386
• CVE-2015-8388
• CVE-2015-8391
• CVE-2016-3191

References

• http://www.redhat.com/security/updates/classification/#normal

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.