[Secure-testing-commits] r33822 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Sat Apr 25 07:05:53 UTC 2015


Author: carnil
Date: 2015-04-25 07:05:53 +0000 (Sat, 25 Apr 2015)
New Revision: 33822

Modified:
   data/CVE/list
Log:
Update status for CVE-2015-2326/pcre3

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-04-25 07:00:50 UTC (rev 33821)
+++ data/CVE/list	2015-04-25 07:05:53 UTC (rev 33822)
@@ -2661,6 +2661,8 @@
 CVE-2015-2326 [heap buffer overflow in pcre_compile2()]
 	RESERVED
 	- pcre3 <unfixed>
+	[wheezy] - pcre3 <not-affected> (Vulnerable code introuced while refactoring between 8.33 and 8.36)
+	[squeeze] - pcre3 <not-affected> (Vulnerable code introuced while refactoring between 8.33 and 8.36)
 	NOTE: http://bugs.exim.org/show_bug.cgi?id=1592
 	NOTE: http://vcs.pcre.org/viewvc?revision=1529&view=revision
 	NOTE: Reproduced invalid read in pcre3/2:8.35-3.3




More information about the Secure-testing-commits mailing list