Source: pcre2
Version: 10.32-3
Tags: patch

Please use --disable-pcre2grep-callout in your Debian package. It is
surprising to users that a grep tool will execute commands.

This issue was identified during the Ubuntu security review for
promotion of pcre2 to main. See https://launchpad.net/bugs/1636666
(comment 47).

I am submitting a merge proposal to
https://salsa.debian.org/debian/pcre2/merge_requests

Thanks,
Jeremy Bicha

Reply via email to