Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 105138 - dev-lang/wml contains affected libpcre
Summary: dev-lang/wml contains affected libpcre
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High major (vote)
Assignee: Gentoo Security
URL:
Whiteboard: B1? [stable] jaervosz
Keywords:
Depends on:
Blocks:
 
Reported: 2005-09-07 05:06 UTC by Thierry Carrez (RETIRED)
Modified: 2005-09-12 16:05 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Thierry Carrez (RETIRED) gentoo-dev 2005-09-07 05:06:06 UTC 
wml 2.0.9 ships with PCRE 3.9 which might is probably affected by CAN-2005-2491,
see bug #103337 and GLSA 200508-17 for details.
Comment 1 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2005-09-08 23:42:37 UTC 
Vapier/Solar please advise.
Comment 2 SpanKY gentoo-dev 2005-09-09 23:50:59 UTC 
ive fixed the autotools to use the system libpcre instead of the local one in
2.0.9-r1
Comment 3 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2005-09-10 01:00:36 UTC 
Thx Mike. 
 
Arches please test and mark stable.
Comment 4 Michael Hanselmann (hansmi) (RETIRED) gentoo-dev 2005-09-11 07:23:13 UTC 
Stable on ppc.
Comment 5 Jason Wever (RETIRED) gentoo-dev 2005-09-11 21:10:36 UTC 
Got SPARC?
Comment 6 Thierry Carrez (RETIRED) gentoo-dev 2005-09-12 04:53:50 UTC 
After closer research, WML includes the affected library but this cannot be
exploited to do anything. Closing (x86 should nevertheless mark stable, I guess)