[ubuntu/vivid-security] pcre3 2:8.35-3.3ubuntu1.1 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Wed Jul 29 16:26:36 UTC 2015


pcre3 (2:8.35-3.3ubuntu1.1) vivid-security; urgency=low

  * SECURITY UPDATE: PCRE Library Heap Overflow Vulnerability
    - debian/patches/cve-2015-2325.patch: change some variables
      pointer to integer, and related contents. Based on upstream patch
    - CVE-2015-2325
  * SECURITY UPDATE: PCRE Library Heap overflow Vulnerability II
    - debian/patches/cve-2015-2326.patch: take save_hwm_offset out
      from adjust_recurse. Based on upstream patch
    - CVE-2015-2326
  * SECURITY UPDATE: PCRE Library Heap Overflow Vulnerability
    - debian/patches/cve-2015-3210.patch: change checking if 
      oc->number == recno code, Based on upstream patch
    - CVE-2015-3210
  * SECURITY UPDATE: PCRE Library Heap Overflow Vulnerability in 
    find_fixedlength()
    - debian/patches/cve-2015-5073.patch: missing test code
      Based on upstream patch
    - CVE-2015-5073

Date: 2015-07-23 13:20:14.761150+00:00
Changed-By: Seyeong Kim <seyeong.kim at canonical.com>
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/pcre3/2:8.35-3.3ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the Vivid-changes mailing list