Created attachment 195054 [details]
The attached patch updates pcre2 to 10.31. You'll need to svn rm files/patch-CVE-2016-3191 before committing.
The pcre2 port is about 2.5 years out-of-date, so lots of things have changed. I've tested against every port I could reasonably build, but I don't know if an exp-run is warranted here or not.
Have you had a chance to look at this?
A commit references this bug:
Date: Wed Aug 15 19:09:01 UTC 2018
New revision: 477253
Update pcre2 to 10.31
Approved by: maintainer (feld)
Committed. Thanks, Mark!