Date: Sun, 11 Nov 2007 19:43:56 -0900
From: Foresight Linux Essential Announcement Service <foresight-security-noreply@foresightlinux.org.>
To: [email protected]Subject: FLEA-2007-0064-1 pcre
Message-ID: <4737da0c.sYKIvOrwIHypIuEZ%[email protected]>
User-Agent: Heirloom mailx 12.2 01/07/07
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: antivirus-gw at tyumen.ru
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Foresight Linux Essential Advisory: 2007-0064-1
Published: 2007-11-11
Rating: Moderate
Updated Versions:
pcre=conary.rpath.com at rpl:1/7.4-0.2-1
group-dist=/foresight.rpath.org@fl:1-devel//1/1.4.1-0.2-3
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1659http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1660http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1661http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1662http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4766http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4767http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4768
Description:
Previous versions of the pcre package contain multiple vulnerabilities
which may allow an attacker to execute arbitrary code.
The pcre library and utilities are not known to be exposed via any
privileged or remote interfaces within Foresight Linux by default, but many
applications linked to the pcre library are routinely exposed to untrusted
data.
- ---
Copyright 2007 Foresight Linux Project
This file is distributed under the terms of the MIT License.
A copy is available at http://www.foresightlinux.org/permanent/mit-license.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.7 (GNU/Linux)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=RTMx
-----END PGP SIGNATURE-----