[Secure-testing-commits] r38046 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Wed Dec 2 16:37:44 UTC 2015
Author: carnil
Date: 2015-12-02 16:37:44 +0000 (Wed, 02 Dec 2015)
New Revision: 38046
Modified:
data/CVE/list
Log:
Add upstream commit reference for CVE-2015-8389
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2015-12-02 16:30:21 UTC (rev 38045)
+++ data/CVE/list 2015-12-02 16:37:44 UTC (rev 38046)
@@ -6943,6 +6943,7 @@
CVE-2015-8389 [mishandles the /(?:|a|){100}x/ pattern and related patterns]
- pcre3 <unfixed>
NOTE: Fixed in 8.38
+ NOTE: http://vcs.pcre.org/pcre?view=revision&revision=1577
TODO: check
CVE-2015-8388 [mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis]
- pcre3 <unfixed>
More information about the Secure-testing-commits
mailing list