Oval Definition:	oval:org.opensuse.security:def:86165
Revision Date: 2021-11-10 Version: 1 Title: Security update for pcre (Moderate) Description: This update for pcre fixes the following issues: Update pcre to version 8.45: - CVE-2020-14155: Fixed integer overflow via a large number after a '(?C' substring (bsc#1172974). - CVE-2019-20838: Fixed buffer over-read in JIT compiler (bsc#1172973). - CVE-2017-7244: Fixed invalid read in _pcre32_xclass() (bsc#1030807). - CVE-2017-7245: Fixed buffer overflow in the pcre32_copy_substring (bsc#1030805). - CVE-2017-7246: Fixed another buffer overflow in the pcre32_copy_substring (bsc#1030803). - CVE-2017-7186: Fixed denial of service caused by an invalid Unicode property lookup (bsc#1030066). - CVE-2017-6004: Fixed denial of service via crafted regular expression (bsc#1025709). Family: unix Class: patch Status: Reference(s): 1025709 1030066 1030803 1030805 1030807 1172973 1172974 CVE-2017-6004 CVE-2017-7186 CVE-2017-7244 CVE-2017-7245 CVE-2017-7246 CVE-2019-20838 CVE-2020-14155 SUSE-SU-2021:3652-1 Platform(s): SUSE Linux Enterprise Server 12 SP3-BCL Product(s): Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information libpcre1-8.45-8.7.1 is installed OR libpcre1-32bit-8.45-8.7.1 is installed OR libpcre16-0-8.45-8.7.1 is installed OR libpcrecpp0-8.45-8.7.1 is installed OR libpcreposix0-8.45-8.7.1 is installed OR pcre-devel-8.45-8.7.1 is installed OR selinux-policy-20140730-36.5.2 is installed OR selinux-policy-devel-20140730-36.5.2 is installed OR selinux-policy-minimum-20140730-36.5.2 is installed
BACK