[Secure-testing-commits] r49999 - data/CVE

[Antoine Beaupré]

Author: anarcat
Date: 2017-03-24 17:30:40 +0000 (Fri, 24 Mar 2017)
New Revision: 49999

Modified:
   data/CVE/list
Log:
mark CVE-2017-7186 as n/a: wheezy has no support for PCRE32, and jessie doesn't compile it in



Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-03-24 16:43:30 UTC (rev 49998)
+++ data/CVE/list	2017-03-24 17:30:40 UTC (rev 49999)
@@ -226,6 +226,8 @@
 CVE-2017-7186 (libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote ...)
 	- pcre3 2:8.39-3 (bug #858230)
 	- pcre2 10.22-3 (bug #858233)
+	[jessie] - pcre3 <not-affected> (Vulnerable code not present)
+	[wheezy] - pcre3 <not-affected> (Vulnerable code not present)
 	NOTE: https://bugs.exim.org/show_bug.cgi?id=2052
 	NOTE: https://vcs.pcre.org/pcre/code/trunk/pcre_internal.h?r1=1649&r2=1688&sortby=date (for pcre3)
 	NOTE: https://vcs.pcre.org/pcre/code/trunk/pcre_ucd.c?r1=1490&r2=1688&sortby=date (for pcre3)