[ubuntu/trusty-updates] pcre3 1:8.31-2ubuntu2.1 (Accepted)

Ubuntu Archive Robot cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk
Wed Jul 29 16:58:08 UTC 2015


pcre3 (1:8.31-2ubuntu2.1) trusty-security; urgency=low

  [ Seyeong Kim ]
  * SECURITY UPDATE: Heap buffer overflow in pcregrep
    - debian/patches/cve-2014-8964.patch: add ecode check.
      Based on upstream
    - CVE-2014-8964
  * SECURITY UPDATE: PCRE Library Heap Overflow Vulnerability
    - debian/patches/cve-2015-2325.patch: change some variables
      pointer to integer, and related contents. Based on upstream patch
    - CVE-2015-2325
  * SECURITY UPDATE: PCRE Library Heap overflow Vulnerability II
    - debian/patches/cve-2015-2326.patch: take save_hwm_offset out
      from adjust_recurse. Based on upstream patch
    - CVE-2015-2326
  * SECURITY UPDATE: PCRE Library Heap Overflow Vulnerability in
    find_fixedlength()
    - debian/patches/cve-2015-5073.patch: add compare errorcode 
      missing test code. Based on upstream patch
    - CVE-2015-5073

  [ Marc Deslauriers ]
  * debian/patches/cve-2015-2325.patch: updated to fix test suite failure
    because of lack of auto-possessification in older pcre.

Date: 2015-07-24 12:31:12.931537+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/pcre3/1:8.31-2ubuntu2.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the Trusty-changes mailing list