Bug 105138 - dev-lang/wml contains affected libpcre
Bug#: 105138 Product:  Gentoo Security Version: unspecified Platform: All
OS/Version: Linux Status: RESOLVED Severity: major Priority: P2
Resolution: INVALID Assigned To: security@gentoo.org Reported By: koon@gentoo.org
Component: Vulnerabilities
URL: 
Summary: dev-lang/wml contains affected libpcre
Keywords:  
Status Whiteboard: B1? [stable] jaervosz
Opened: 2005-09-07 05:06 0000
Description:   Opened: 2005-09-07 05:06 0000 
wml 2.0.9 ships with PCRE 3.9 which might is probably affected by
CAN-2005-2491,
see bug #103337 and GLSA 200508-17 for details.

------- Comment #1 From Sune Kloppenborg Jeppesen 2005-09-08 23:42:37 0000 ------- 
Vapier/Solar please advise.

------- Comment #2 From SpanKY 2005-09-09 23:50:59 0000 ------- 
ive fixed the autotools to use the system libpcre instead of the local one in
2.0.9-r1

------- Comment #3 From Sune Kloppenborg Jeppesen 2005-09-10 01:00:36 0000 ------- 
Thx Mike. 
 
Arches please test and mark stable.

------- Comment #4 From Michael Hanselmann (hansmi) (RETIRED) 2005-09-11 07:23:13 0000 ------- 
Stable on ppc.

------- Comment #5 From Jason Wever (RETIRED) 2005-09-11 21:10:36 0000 ------- 
Got SPARC?

------- Comment #6 From Thierry Carrez (RETIRED) 2005-09-12 04:53:50 0000 ------- 
After closer research, WML includes the affected library but this cannot be
exploited to do anything. Closing (x86 should nevertheless mark stable, I guess)