Hi,
I have a query regarding the recent buffer overflow bug meniotioned @ *
http://bugs.gentoo.org/show_bug.cgi?id=228091<
http://bugs.gentoo.org/show_bug.cgi?id=228091%29>
*I do not see that piece of code in versions of the PCRE < 7.0, atleast the
'if' block containing the fix does not exist in these versions. Does this
mean that this is not a vulnerability in these earlier versions ? Also,
would it also mean that it is not a vulnerability in the much earlier
versions like 3.0 as well ?
Rgds,
Rashmi