[ GLSA 201710-09 ] pcre2

[GLSA]

Gentoo Linux Security Advisory

Title: PCRE2: Multiple vulnerabilities (GLSA 201710-09)
Severity: normal
Exploitable: remote
Date: 2017-10-08
Bug(s): #614050, #617942, #617944
ID: 201710-09

Synopsis

Multiple vulnerabilities have been found in PCRE2, the worst of
which may allow remote attackers to execute arbitrary code.


Background

PCRE2 is a project based on PCRE (Perl Compatible Regular Expressions)
which has a new and revised API.


Affected Packages

Package: dev-libs/libpcre2
Vulnerable: < 10.30
Unaffected: >= 10.30
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in PCRE2. Please review
the referenced CVE identifiers for details.


Impact

A remote attacker could possibly execute arbitrary code with the
privileges of the process, cause a Denial of Service condition, or have
other unspecified impacts.


Workaround

There is no known workaround at this time.

Resolution

All PCRE2 users should upgrade to the latest version: