From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:51815) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cxcha-0008Oe-9d for guix-patches@gnu.org; Mon, 10 Apr 2017 13:02:07 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cxchW-00042m-CI for guix-patches@gnu.org; Mon, 10 Apr 2017 13:02:06 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:43217) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1cxchW-00042g-8D for guix-patches@gnu.org; Mon, 10 Apr 2017 13:02:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1cxchW-000550-14 for guix-patches@gnu.org; Mon, 10 Apr 2017 13:02:02 -0400 Subject: bug#26431: [PATCH 0/2] Fix CVE-2017-7186 in pcre and pcre2 Resent-Message-ID: From: Marius Bakke In-Reply-To: <20170410133936.29955-1-ludo@gnu.org> References: <20170410133936.29955-1-ludo@gnu.org> Date: Mon, 10 Apr 2017 19:01:10 +0200 Message-ID: <87d1cktcx5.fsf@fastmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: Ludovic =?UTF-8?Q?Court=C3=A8s?= , 26431@debbugs.gnu.org --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Ludovic Court=C3=A8s writes: > Hello, > > These patches fix > in pcre and pcre2 using the upstream patches referenced in the CVE databa= se. > > Ludo'. > > Ludovic Court=C3=A8s (2): > gnu: pcre2: Patch CVE-2017-7186. > gnu: pcre: Patch CVE-2017-7186. Thank you for these! Please add URLs to the upstream fixes in the patch headers: https://vcs.pcre.org/pcre?view=3Drevision&revision=3D1688 https://vcs.pcre.org/pcre2?view=3Drevision&revision=3D670 LGTM apart from that :) --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEyBAEBCgAdFiEEu7At3yzq9qgNHeZDoqBt8qM6VPoFAljrulYACgkQoqBt8qM6 VPrmtQf0D7ssls/NfISOOA8NcWjaXW0e+R695zaAjTXYF1cBJQFZVz8XeirELUcH 31lPGxUcH/OQEw1JPvHvNglTEz8m7QV17u5lhXX1YTsEXL+EPAHezaJAkMuNkfgL hEVhquvaKhloLsDjRYAKzzZ3PBsx1Qr2UR3ksVQbO9PG/006ZzaVMgLai95w75JU V0vdkDsRCoNM1bZxyf/1XOvDrjrSKuaLHpAG7pu51xiujLZfRKSluUNApKsVrUGH 1pjnJzMx1wJqOpBSl4C2rSdLhHloO5rDpB+9xQoy/aS5xs5ZZuJusjT+oMPzuTCa 8LQs5Erpk+jOGXqTJO6gcfZ26hPM =zjdq -----END PGP SIGNATURE----- --=-=-=--