Bug#920273: pcre2: Please disable pcre2grep-callout feature

2019-01-24 Thread Matthew Vernon
Hi, On 23/01/2019 14:04, Jeremy Bicha wrote: Please use --disable-pcre2grep-callout in your Debian package. It is surprising to users that a grep tool will execute commands. Err, yes, that is quite surprising! Regards, Matthew

Bug#920273: pcre2: Please disable pcre2grep-callout feature

2019-01-23 Thread Jeremy Bicha
Source: pcre2 Version: 10.32-3 Tags: patch Please use --disable-pcre2grep-callout in your Debian package. It is surprising to users that a grep tool will execute commands. This issue was identified during the Ubuntu security review for promotion of pcre2 to main. See https://launchpad.net/bugs/16