1
2
3
4
5
6
7
8
9
10
11
12
|
TinyMUX 2.12 embeds a modified copy of PCRE3 in its source tree (src/pcre.*).
This embedded copy includes a patch to support timeouts on user-supplied regular expressions.
The patch was created to prevent potential ReDoS (regular expression denial of service)
attacks in the game server, especially since anonymous users can supply arbitrary patterns.
Upstream PCRE did not accept this patch, and maintaining it across releases became
increasingly fragile. As a result, TinyMUX 2.13 and later have removed the embedded PCRE
code and now use libpcre2-dev (dynamic linking).
This packaging retains the embedded PCRE only to faithfully represent upstream version 2.12.
This is a legacy behavior and will not continue in future Debian uploads.
|
