-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 3.0 (quilt) Source: pcre3 Binary: libpcre3, libpcre3-udeb, libpcrecpp0v5, libpcre3-dev, libpcre3-dbg, pcregrep, libpcre16-3, libpcre32-3 Architecture: any Version: 2:8.35-7.2 Maintainer: Matthew Vernon <[email protected]> Standards-Version: 3.9.3 Build-Depends: debhelper (>= 5.0.22), dpkg-dev (>= 1.16.0), dh-autoreconf Package-List: libpcre16-3 deb libs optional arch=any libpcre3 deb libs important arch=any libpcre3-dbg deb debug extra arch=any libpcre3-dev deb libdevel optional arch=any libpcre3-udeb udeb debian-installer important arch=any libpcre32-3 deb libs optional arch=any libpcrecpp0v5 deb libs optional arch=any pcregrep deb utils optional arch=any Checksums-Sha1: 5a0efc7332c6741114372020a60acfed22befcb9 1996552 pcre3_8.35.orig.tar.gz dd16fc1fa3c85fa3f5a313470af51ccec487a8d9 29105 pcre3_8.35-7.2.debian.tar.gz Checksums-Sha256: 1c9ee292943ba2737f127b481a3f72f44c13fbd09a7b5b4eb8fa58650cfa56a0 1996552 pcre3_8.35.orig.tar.gz 087754802f54f133a10576186ed4195d7cb39dfba0f2f9c94e20c31f13e25e9c 29105 pcre3_8.35-7.2.debian.tar.gz Files: ed58bcbe54d3b1d59e9f5415ef45ce1c 1996552 pcre3_8.35.orig.tar.gz 8254b0c3a0e9399a7a093537674fd185 29105 pcre3_8.35-7.2.debian.tar.gz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJV8xmeAAoJEAVMuPMTQ89EsH0P/1qZccuIMHljIudITSkCb4Tw qtPkhY95FDnn460WB/Shj0kJ5m4iy3OFeSFXigUELcFBOT33oCKvYu92DV60w6lw Jb2qj/90pLun3RcihXxefEdIQEJcrA6+ERi4QBBO6ba12nnIcO+3CQFJte4Bt3z/ CFFoMu1iXf2NrWOmu+ZTfAONJhoN8O+WkJEvlTFrJehoCvPerTN3nZQisXPAUmmm IAQaxof+6kORoX6nD3pZI6TaLKO/s+b0gnrLz54IxJvpI/+usCdhrsBhmK11wq+o ySFffYzGvRDubEW0Top2IIMV88F6bqyfPjYfYdjjRT3IIDZ5g1stoUeTH4bMupV5 AaTk4JQpsfDV7al+xRxmnofY3RXTXdwbbkRon4cxp7ehn3HnuFvsd59lZIbupwHc av5A2S7ytSjRL/pwUHl12hLv80manDZbHrnfQuorCQOyhZM5r//dqaOU+zHID3sk gfKQwfzQPEE2fuFoqSbLWCmTOHE74xwuIav87UOwqpP+cYwZdJQwbQmjO5mKbUdz 3bMqcX5ydfJLjNxJctoZ5cR3KMXM+TDmpLgRiRg+9/pW9BFEZgK8XxAf2c8tJqgA 7/6Cissn1oixfFKvjHfECwGWD8EsuTzcRLrkd57qBO1nSEyMbKYOz8522n95HBIs /M+tL3UselH4c/sx1ZQb =WMST -----END PGP SIGNATURE----- Changes: pcre3 (2:8.35-7.2) unstable; urgency=low * Non-maintainer upload (with maintainer's permission). * Add Fix-compiler-crash-misbehaviour-for-zero-repeated-gr.patch. Fixes "PCRE Library Stack Overflow Vulnerability" (Upstream bug 1503) * Add Fix-compile-time-loop-for-recursive-reference-within.patch. Fixes "PCRE Call Stack Overflow Vulnerability" (Upstream bug 1515) * Add 794589-information-disclosure.patch. Fixes "pcre_exec does not fill offsets for certain regexps" leading to information disclosure. (Closes: #794589) * Add Fix-bad-compile-for-groups-like-2-0-1999.patch. CVE-2015-2325: heap buffer overflow in compile_branch(). (Closes: #781795) * Add Fix-bad-compilation-for-patterns-like-1-1-with-forwa.patch. CVE-2015-2326: heap buffer overflow in pcre_compile2(). (Closes: #783285) * Add Fix-buffer-overflow-for-named-recursive-back-referen.patch. CVE-2015-3210: heap buffer overflow in pcre_compile2() / compile_regex(). (Closes: #787433) -- Salvatore Bonaccorso <[email protected]> Fri, 11 Sep 2015 20:04:19 +0200
