[Secure-testing-commits] r38084 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Thu Dec 3 19:10:36 UTC 2015


Author: carnil
Date: 2015-12-03 19:10:36 +0000 (Thu, 03 Dec 2015)
New Revision: 38084

Modified:
   data/CVE/list
Log:
CVE-2015-8394/pcre3 checked

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-03 18:56:21 UTC (rev 38083)
+++ data/CVE/list	2015-12-03 19:10:36 UTC (rev 38084)
@@ -6934,9 +6934,11 @@
 	TODO: check
 CVE-2015-8394 (PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) ...)
 	- pcre3 <unfixed>
+	[jessie] - pcre3 <no-dsa> (Minor issue)
+	[wheezy] - pcre3 <no-dsa> (Minor issue)
+	[squeeze] - pcre3 <no-dsa> (Minor issue)
 	NOTE: Fixed in 8.38
 	NOTE: http://vcs.pcre.org/pcre?view=revision&revision=1589
-	TODO: check
 CVE-2015-8393 (pcregrep in PCRE before 8.38 mishandles the -q option for binary ...)
 	- pcre3 <unfixed>
 	[jessie] - pcre3 <no-dsa> (Minor issue)




More information about the Secure-testing-commits mailing list