Debian Security Advisory 1602-1 – Tavis Ormandy discovered that PCRE, the Perl-Compatible Regular Expression library, may encounter a heap overflow condition when compiling certain regular expressions involving in-pattern options and branches, potentially leading to arbitrary code execution.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/68013/dsa-1602-1.txt
Source: https://packetstormsecurity.com/files/68013/Debian-Linux-Security-Advisory-1602-1.html