GNU bug report logs - #26431
[PATCH 0/2] Fix CVE-2017-7186 in pcre and pcre2

Previous Next

Full log

View this message in rfc822 format

From: Marius Bakke <mbakke <at> fastmail.com>
To: Ludovic Courtès <ludo <at> gnu.org>, 26431 <at> debbugs.gnu.org
Subject: bug#26431: [PATCH 0/2] Fix CVE-2017-7186 in pcre and pcre2
Date: Mon, 10 Apr 2017 19:01:10 +0200

[Message part 1 (text/plain, inline)]

Ludovic Courtès <ludo <at> gnu.org> writes:

> Hello,
>
> These patches fix <https://nvd.nist.gov/vuln/detail?vulnId=CVE-2017-7186>
> in pcre and pcre2 using the upstream patches referenced in the CVE database.
>
> Ludo'.
>
> Ludovic Courtès (2):
>   gnu: pcre2: Patch CVE-2017-7186.
>   gnu: pcre: Patch CVE-2017-7186.

Thank you for these! Please add URLs to the upstream fixes in the patch
headers:

https://vcs.pcre.org/pcre?view=revision&revision=1688
https://vcs.pcre.org/pcre2?view=revision&revision=670

LGTM apart from that :)

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.