OpenSDE Packages Database (without history before r20070)
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

41 lines
1.5 KiB

Updated pcre (7.2 -> 7.6) : SECURITY - CRITICAL CVE-2007-1659 (Medium) : Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via regex patters containing unmatched "\Q\E" sequences with orphan "\E" codes. CVE-2007-1660 (Medium) : Perl-Compatible Regular Expression (PCRE) library before 7.3 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code. CVE-2007-1661 (Medium) : Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matching certain input bytes against some regex patterns in non-UTF-8 mode, which allows context-dependent attackers to obtain sensitive information or cause a denial of service (crash), as demonstrated by the "\X?\d" and "\P{L}?\d" patterns. CVE-2007-1662 (Medium) : Perl-Compatible Regular Expression (PCRE) library before 7.3 reads past the end of the string when searching for unmatched brackets and parentheses, which allows context-dependent attackers to cause a denial of service (crash), possibly involving forward references. CVE-2007-4766 (High) : Multiple integer overflows in Perl-Compatible Regular Expression (PCRE) library before 7.3 allow context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via unspecified escape (backslash) sequences. CVE-2007-4767 (Medium) : Perl-Compatible Regular Expression (PCRE) library before 7.3 does not properly compute the length of (1) a \p sequence, (2) a \P sequence, or (3) a \P{x} sequence, which allows context-dependent attackers to cause a denial of service (infinite loop or crash) or execute arbitrary code. CVE-2007-4768 (Medium) : Heap-based buffer overflow in Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to execute arbitrary code via a singleton Unicode sequence in a character class in a regex pattern, which is incorrectly optimized.
17 years ago
Updated pcre (7.2 -> 7.6) : SECURITY - CRITICAL CVE-2007-1659 (Medium) : Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via regex patters containing unmatched "\Q\E" sequences with orphan "\E" codes. CVE-2007-1660 (Medium) : Perl-Compatible Regular Expression (PCRE) library before 7.3 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code. CVE-2007-1661 (Medium) : Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matching certain input bytes against some regex patterns in non-UTF-8 mode, which allows context-dependent attackers to obtain sensitive information or cause a denial of service (crash), as demonstrated by the "\X?\d" and "\P{L}?\d" patterns. CVE-2007-1662 (Medium) : Perl-Compatible Regular Expression (PCRE) library before 7.3 reads past the end of the string when searching for unmatched brackets and parentheses, which allows context-dependent attackers to cause a denial of service (crash), possibly involving forward references. CVE-2007-4766 (High) : Multiple integer overflows in Perl-Compatible Regular Expression (PCRE) library before 7.3 allow context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via unspecified escape (backslash) sequences. CVE-2007-4767 (Medium) : Perl-Compatible Regular Expression (PCRE) library before 7.3 does not properly compute the length of (1) a \p sequence, (2) a \P sequence, or (3) a \P{x} sequence, which allows context-dependent attackers to cause a denial of service (infinite loop or crash) or execute arbitrary code. CVE-2007-4768 (Medium) : Heap-based buffer overflow in Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to execute arbitrary code via a singleton Unicode sequence in a character class in a regex pattern, which is incorrectly optimized.
17 years ago
  1. [COPY] --- SDE-COPYRIGHT-NOTE-BEGIN ---
  2. [COPY] This copyright note is auto-generated by ./scripts/Create-CopyPatch.
  3. [COPY]
  4. [COPY] Filename: package/.../pcre/pcre.desc
  5. [COPY] Copyright (C) 2006 - 2008 The OpenSDE Project
  6. [COPY] Copyright (C) 2004 - 2006 The T2 SDE Project
  7. [COPY] Copyright (C) 1998 - 2003 Clifford Wolf
  8. [COPY]
  9. [COPY] More information can be found in the files COPYING and README.
  10. [COPY]
  11. [COPY] This program is free software; you can redistribute it and/or modify
  12. [COPY] it under the terms of the GNU General Public License as published by
  13. [COPY] the Free Software Foundation; version 2 of the License. A copy of the
  14. [COPY] GNU General Public License can be found in the file COPYING.
  15. [COPY] --- SDE-COPYRIGHT-NOTE-END ---
  16. [I] Perl Compatible Regulat Expressions
  17. [T] The PCRE library is a set of functions that implement regular expression
  18. [T] pattern matching using the same syntax and semantics as Perl 5. PCRE has
  19. [T] its own native API, as well as a set of wrapper functions that correspond
  20. [T] to the POSIX regular expression API. The PCRE library is free, even for
  21. [T] building commercial software.
  22. [T]
  23. [T] PCRE was originally written for the Exim MTA, but is now used by many
  24. [T] projects, including Python, Postfix, KDE, Analog, and PHP.
  25. [U] http://www.pcre.org/
  26. [A] Philip Hazel <ph10@cam.ac.uk>
  27. [M] The OpenSDE Community <list@opensde.org>
  28. [C] base/library
  29. [F] NOPARALLEL
  30. [L] BSD
  31. [S] Stable
  32. [V] 7.7
  33. [P] X -----5---9 110.000
  34. [D] 3238643479 pcre-7.7.tar.bz2 ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/