Accepting request 304864 from home:AndreasStieger:branches:Base:System

pcre 8.37
CVE-2015-2325 [boo#924960]
CVE-2015-2326 [boo#924961]
CVE-2014-8964 [boo#906574]

OBS-URL: https://build.opensuse.org/request/show/304864
OBS-URL: https://build.opensuse.org/package/show/Base:System/pcre?expand=0&rev=66

pcre-8.36.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ef833457de0c40e82f573e34528f43a751ff20257ad0e86d272ed5637eb845bb
-size 1533818

pcre-8.37.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:51679ea8006ce31379fb0860e46dd86665d864b5020fc9cd19e71260eef4789d
+size 1557603

pcre.changes

@@ -1,3 +1,18 @@
+-------------------------------------------------------------------
+Thu Apr 30 22:08:31 UTC 2015 - astieger@suse.com
+
+- pcre 8.37:
+  * CVE-2015-2325: Patterns with certain groups specifying a zero
+    minimum quantifier caused incorrect code to be compiled,
+    leading to an incorrect memory read. [boo#924960]
+  * CVE-2015-2326: Specific patterns containing a forward reference
+    with subroutine calls caused incorrect code to be compiled
+    [boo#924961]
+  * CVE-2014-8964: If an assertion condition was quantified with a
+    minimum of zero, SIGSEGV or other misbehaviour could occur.
+    [boo#906574]
+  * further bug fixes as listed in ChangeLog
+
 -------------------------------------------------------------------
 Mon Mar  9 00:43:18 UTC 2015 - p.drouand@gmail.com
 

pcre.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package pcre
 #
-# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           pcre
-Version:        8.36
+Version:        8.37
 Release:        0
 Summary:        A library for Perl-compatible regular expressions
 License:        BSD-3-Clause