Re: Heap Overflow in PCRE

[Moritz Muehlenhoff <jmm () debian org>]

Hanno Böck wrote:
> Appart from that a couple of other vulnerabilities found by other
> people have been fixed in this release:

https://bugs.exim.org/show_bug.cgi?id=1638 is CVE-2015-3217

The other unassigned issues already have open CVE requests:

https://bugs.exim.org/show_bug.cgi?id=1503
-> http://www.openwall.com/lists/oss-security/2015/05/31/5

https://bugs.exim.org/show_bug.cgi?id=1672
-> http://www.openwall.com/lists/oss-security/2015/08/24/1

https://bugs.exim.org/show_bug.cgi?id=1515
-> http://www.openwall.com/lists/oss-security/2015/05/31/4

https://bugs.exim.org/show_bug.cgi?id=1667
-> http://www.openwall.com/lists/oss-security/2015/08/05/3

Cheers,
        Moritz