SuSE 10 Security Update : pcre (ZYPP Patch Number 4748)

Specially crafted regular expressions could lead to a buffer overflow in the pcre library. Applications using pcre to process regular expressions from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code. CVE-2006-7230 %NASLMINLEVEL 70300 C Tenable...

SuSE 10 Security Update : pcre (ZYPP Patch Number 4707)

Specially crafted regular expressions could lead to a buffer overflow in the pcre library. Applications using pcre to process regular expressions from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code. CVE-2006-7230 %NASLMINLEVEL 70300 C Tenable...

python, tkinter security update

CentOS Errata and Security Advisory CESA-2007:1077-01 Updated python packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted,...

RHEL 3 / 4 : python (RHSA-2007:1076)

Updated python packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted, interactive, object-oriented programming language. An...

CentOS 3 / 4 : python (CESA-2007:1076)

Updated python packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted, interactive, object-oriented programming language. An...

PCRE Perl兼容规则表达式库POSIX拒绝服务漏洞

PCRE库是一款对PERL兼容正则表达式支持。 PCRE库不正确过滤用户提供的规则表达式，远程攻击者可以利用漏洞对链接此库的应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 PCRE PCRE 6.2 PCRE PCRE 6.1 PCRE PCRE 6.0 PCRE PCRE 5.0 + RedHat Fedora Core4 PCRE PCRE 4.5 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3...

RHEL 2.1 : python (RHSA-2007:1077)

Updated python packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted, interactive, object-oriented programming language. An integer...

openSUSE 10 Security Update : glib2 (glib2-4768)

Glib2 contains a copy of the pcre library. Specially crafted regular expressions could lead to a buffer overflow in the pcre library. Applications using pcre to process regular expressions from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code...

Important: pcre security update

4.5-4.6 - Add pcre-4.5-CVE-2007-1659.patch - Update pcre-4.5-CVE-2007-1660.patch - Add pcre-4.5-CVE-2007-7230.patch - Resolves: 380511...

CVE-2006-7226

Perl-Compatible Regular Expression PCRE library before 6.7 does not properly calculate the compiled memory allocation for regular expressions that involve a quantified "subpattern containing a named recursion or subroutine reference," which allows context-dependent attackers to cause a denial of...

CVE-2006-7226

Perl-Compatible Regular Expression PCRE library before 6.7 does not properly calculate the compiled memory allocation for regular expressions that involve a quantified "subpattern containing a named recursion or subroutine reference," which allows context-dependent attackers to cause a denial of...

CVE-2006-7225

Perl-Compatible Regular Expression PCRE library before 6.7 allows context-dependent attackers to cause a denial of service error or crash via a regular expression that involves a "malformed POSIX character class", as demonstrated via an invalid character after a sequence...

CVE-2006-7226

Perl-Compatible Regular Expression PCRE library before 6.7 does not properly calculate the compiled memory allocation for regular expressions that involve a quantified "subpattern containing a named recursion or subroutine reference," which allows context-dependent attackers to cause a denial of...

CVE-2006-7225

Perl-Compatible Regular Expression PCRE library before 6.7 allows context-dependent attackers to cause a denial of service error or crash via a regular expression that involves a "malformed POSIX character class", as demonstrated via an invalid character after a sequence...

CVE-2006-7225

Perl-Compatible Regular Expression PCRE library before 6.7 allows context-dependent attackers to cause a denial of service error or crash via a regular expression that involves a "malformed POSIX character class", as demonstrated via an invalid character after a sequence...

CVE-2006-7225

Perl-Compatible Regular Expression PCRE library before 6.7 allows context-dependent attackers to cause a denial of service error or crash via a regular expression that involves a "malformed POSIX character class", as demonstrated via an invalid character after a sequence...

CVE-2006-7225

PCRE library vulnerability CVE-2006-7225 (and related CVEs) allows context-dependent attackers to cause denial of service (error/crash) by using a malformed POSIX character class in a regex, as observed before PCRE 6.7. The CVE entry is corroborated by multiple connected advisories (RHSA-2007:106...

CVE-2006-7226

The CVE concerns the PCRE library (pre-6.7) and a memory-allocation miscalculation for compiled patterns that include a quantified subpattern containing a named recursion or subroutine reference, enabling a context-dependent denial of service (crash/error). Connected advisories (RHSA-2007:1068/ R...

CVE-2006-7226

Perl-Compatible Regular Expression PCRE library before 6.7 does not properly calculate the compiled memory allocation for regular expressions that involve a quantified "subpattern containing a named recursion or subroutine reference," which allows context-dependent attackers to cause a denial of...

CVE-2006-7226

Perl-Compatible Regular Expression PCRE library before 6.7 does not properly calculate the compiled memory allocation for regular expressions that involve a quantified "subpattern containing a named recursion or subroutine reference," which allows context-dependent attackers to cause a denial of...