RHBA-2013:1298 - Bug Fix Advisory

Topic

Updated pcre packages that fix several bugs are now available for Red Hat
Enterprise Linux 5.

Description

The pcre packages provide the Perl-compatible regular expression (PCRE) library.

This update fixes the following bugs:

• A previous update enabled Unicode properties to support \p{..}, \P{..}, and \X

escape sequences. However, compiling certain regular expressions which contained
extended classes under a non-UTF-8 PCRE mode failed due to the compilation
entering an infinite loop. This has been fixed in this update so that compiling
such regular expressions completes as expected. (BZ#669413)

• Using the pcregrep tool with -M (mutli-line match) and -v (inverse match)

options caused the pcregrep tool to loop infinitely. With this update, the
pcregrep multi-line loop logic has been fixed to advance in the input stream
properly if inverted matching is requested, and it is now possible to use the
"pcregrep -Mv" command. (BZ#859959)

• Previously, matching a regular expression with Unicode properties in a

non-UTF-8 mode against a string with non-ASCII characters, caused an unexpected
termination with a segmentation fault in the PCRE library. This update fixes
back-tracking in non-UTF-8 mode, and the PCRE library no longer crashes in the
aforementioned scenario. (BZ#866520)

Users of pcre are advised to upgrade to these updated packages, which fix these
bugs.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 669413 - pcre does not terminate on some unicode patterns
• BZ - 866520 - pcre_exec() segfaults when back-tracking Unicode properties in non-UTF-8 mode

CVEs

(none)

References

(none)