105138 2005-09-07 05:06 0000 dev-lang/wml contains affected libpcre 2005-09-12 16:05:40 0000 1 1 1 Unclassified Gentoo Security Vulnerabilities unspecified All Linux RESOLVED INVALID B1? [stable] jaervosz P2 major --- 1 koon@gentoo.org security@gentoo.org koon@gentoo.org 2005-09-07 05:06:06 0000 wml 2.0.9 ships with PCRE 3.9 which might is probably affected by CAN-2005-2491, see bug #103337 and GLSA 200508-17 for details. jaervosz@gentoo.org 2005-09-08 23:42:37 0000 Vapier/Solar please advise. vapier@gentoo.org 2005-09-09 23:50:59 0000 ive fixed the autotools to use the system libpcre instead of the local one in 2.0.9-r1 jaervosz@gentoo.org 2005-09-10 01:00:36 0000 Thx Mike. Arches please test and mark stable. hansmi@gentoo.org 2005-09-11 07:23:13 0000 Stable on ppc. weeve@gentoo.org 2005-09-11 21:10:36 0000 Got SPARC? koon@gentoo.org 2005-09-12 04:53:50 0000 After closer research, WML includes the affected library but this cannot be exploited to do anything. Closing (x86 should nevertheless mark stable, I guess)