Source: pcre3 Version: 2:8.35-5 Severity: important Tags: security upstream
Hi, the following vulnerability was published for pcre3 (reporting this separately instead collecting to the others since don't know affected versions, original report confirms 8.33, 8.34, 8.35, 8.36, 8.37 to be vulnerable). CVE-2015-3217[0]: PCRE Library Call Stack Overflow Vulnerability in match() If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2015-3217 [1] https://bugs.exim.org/show_bug.cgi?id=1638 Please adjust the affected versions in the BTS as needed. Regards, Salvatore -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org