Re: CVS commit: pkgsrc/lang/perl5

[maya%netbsd.org@localhost]

On Sat, Sep 23, 2017 at 05:29:07AM +0000, Maya Rashish wrote:
> CVE-2017-12837: heap buffer overflow in regular expression compiler
> CVE-2017-12883: buffer over-read in regular expression parser

In case it's supposed to be under embargo, I am not on any private list
and used the following for info (all public at the time of the commit):

red hat: https://bugzilla.redhat.com/show_bug.cgi?id=1492091
NIST: https://nvd.nist.gov/vuln/detail/CVE-2017-12883
openbsd: https://v4.freshbsd.org/commit/openbsd/src/9PMIgIGv1TlphH1r