Ludovic Courtès writes: > Hello, > > These patches fix > in pcre and pcre2 using the upstream patches referenced in the CVE database. > > Ludo'. > > Ludovic Courtès (2): > gnu: pcre2: Patch CVE-2017-7186. > gnu: pcre: Patch CVE-2017-7186. Thank you for these! Please add URLs to the upstream fixes in the patch headers: https://vcs.pcre.org/pcre?view=revision&revision=1688 https://vcs.pcre.org/pcre2?view=revision&revision=670 LGTM apart from that :)