[Secure-testing-commits] r38064 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Wed Dec 2 21:38:45 UTC 2015
Author: carnil
Date: 2015-12-02 21:38:45 +0000 (Wed, 02 Dec 2015)
New Revision: 38064
Modified:
data/CVE/list
Log:
Update information for CVE-2015-8388/pcre3
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2015-12-02 21:27:19 UTC (rev 38063)
+++ data/CVE/list 2015-12-02 21:38:45 UTC (rev 38064)
@@ -6954,10 +6954,10 @@
NOTE: http://vcs.pcre.org/pcre?view=revision&revision=1577
TODO: check
CVE-2015-8388 (PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and ...)
- - pcre3 <unfixed>
+ - pcre3 2:8.35-7
NOTE: Fixed in 8.38
NOTE: http://vcs.pcre.org/pcre?view=revision&revision=1571
- TODO: check
+ TODO: check, duplicate of CVE-2015-5073, check with MITRE
CVE-2015-8387 (PCRE before 8.38 mishandles (?123) subroutine calls and related ...)
- pcre3 <unfixed>
[jessie] - pcre3 <no-dsa> (Minor issue)
More information about the Secure-testing-commits
mailing list