clone 326628 -1 close -1 1.5 reassign 326628 libgoffice-1 thanks FWIW, embedding a copy of PCRE in a Debian package regardless of whether it is exploitable is a bug in my book. It just asks for trouble. It makes bug fixing hard. I maintain a package that embeds pcre (analog), but I took care to not have it build that version of pcre, and so we don't have to worry about security issues in pcre for analog.
Of course this might be hard to fix in this case since they "programmatically changed" (which looks at first diff to mean "reindented") (and relicense!) their embedded copy of pcre. -- see shy jo
signature.asc
Description: Digital signature
