portage-ng / portage / dev-util / re2c / 3.1
portage-ng glsa
2 advisories reference dev-util/re2c · none place version 3.1 in a vulnerable range
▸ GLSA 202408-16 re2c: Denial of Service this version unaffected normal local 2024-08-09

A vulnerability has been discovered in re2c, which can lead to a denial of service.

Announced
2024-08-09
Revised
2024-08-09
Access
local
Bugs
#719872
Advisory
https://security.gentoo.org/glsa/202408-16

Affected packages

PackageArchVulnerableUnaffected
dev-util/re2c*< 2.0>= 2.0

Background

re2c is a tool for generating C-based recognizers from regular expressions.

Description

Please review the CVE identifier referenced below for details.

Impact

Please review the CVE identifier referenced below for details.

Workaround

There is no known workaround at this time.

Resolution

All re2c users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-util/re2c-2.0"

References

▸ GLSA 202007-28 re2c: Buffer overflow this version unaffected normal remote 2020-07-27

A vulnerability in re2c could lead to a Denial of Service condition.

Announced
2020-07-27
Revised
2020-07-27
Access
remote
Bugs
#718350
Advisory
https://security.gentoo.org/glsa/202007-28

Affected packages

PackageArchVulnerableUnaffected
dev-util/re2c*< 1.3-r1>= 1.3-r1

Background

re2c is a tool for generating C-based recognizers from regular expressions.

Description

A heap buffer overflow vulnerability was discovered in re2c.

Impact

An attacker could possibly cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All re2c users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-util/re2c-1.3-r1"

References