grep-2.20-2.el7

エラータID: AXSA:2015-669:01

Release date: 
Monday, November 23, 2015 - 13:51
Subject: 
grep-2.20-2.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
Low
Description: 

The GNU versions of commonly used grep utilities. Grep searches through
textual input for lines which contain a match to a specified pattern and then
prints the matching lines. GNU's grep utilities include grep, egrep and fgrep.

GNU grep is needed by many scripts, so it shall be installed on every system.

Security issues fixed with this release:

CVE-2015-1345
The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows
local users to cause a denial of service (out-of-bounds heap read and
crash) via crafted input when using the -F option.

Fixed bugs:

* Prior to this update, the \w and \W symbols were inconsistently matched to the [:alnum:] character class. Consequently, using regular expressions with "\w" and "\W" could lead to incorrect results. With this update, "\w" is consistently matched to the [_[:alnum:]] character, and "\W" is consistently matched to the [^_[:alnum:]] character.
* Previously, the Perl Compatible Regular Expression (PCRE) matcher (selected by the "-P" parameter in grep) did not work correctly when matching non-UTF-8 text in UTF-8 locales. Consequently, an error message about invalid UTF-8 byte sequence characters was returned. To fix this bug, patches from upstream have been applied to the grep utility. As a result, PCRE now skips non-UTF-8 characters as non-matching text without returning any error message.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. grep-2.20-2.el7.src.rpm
    MD5: 6167cd23f9da5557105d1a4f50dbcbdd
    SHA-256: d235097360414a05282a20e731a476514302194118c4654ce36ce12390b8a5d3
    Size: 1.22 MB

Asianux Server 7 for x86_64
  1. grep-2.20-2.el7.x86_64.rpm
    MD5: 18f95d3cf221000de31c2d0a78574bac
    SHA-256: 28d9d0a6e20fc80eec0315bc74314a2daec334c96ac273579a807523e2a531cc
    Size: 342.69 kB