diff --git a/pcre-8.36.tar.bz2 b/pcre-8.36.tar.bz2 deleted file mode 100644 index 100317d..0000000 --- a/pcre-8.36.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:ef833457de0c40e82f573e34528f43a751ff20257ad0e86d272ed5637eb845bb -size 1533818 diff --git a/pcre-8.36.tar.bz2.sig b/pcre-8.36.tar.bz2.sig deleted file mode 100644 index 5222e42..0000000 Binary files a/pcre-8.36.tar.bz2.sig and /dev/null differ diff --git a/pcre-8.37.tar.bz2 b/pcre-8.37.tar.bz2 new file mode 100644 index 0000000..5380341 --- /dev/null +++ b/pcre-8.37.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:51679ea8006ce31379fb0860e46dd86665d864b5020fc9cd19e71260eef4789d +size 1557603 diff --git a/pcre-8.37.tar.bz2.sig b/pcre-8.37.tar.bz2.sig new file mode 100644 index 0000000..42b6a48 Binary files /dev/null and b/pcre-8.37.tar.bz2.sig differ diff --git a/pcre.changes b/pcre.changes index 6cace07..d0ad046 100644 --- a/pcre.changes +++ b/pcre.changes @@ -1,3 +1,18 @@ +------------------------------------------------------------------- +Thu Apr 30 22:08:31 UTC 2015 - astieger@suse.com + +- pcre 8.37: + * CVE-2015-2325: Patterns with certain groups specifying a zero + minimum quantifier caused incorrect code to be compiled, + leading to an incorrect memory read. [boo#924960] + * CVE-2015-2326: Specific patterns containing a forward reference + with subroutine calls caused incorrect code to be compiled + [boo#924961] + * CVE-2014-8964: If an assertion condition was quantified with a + minimum of zero, SIGSEGV or other misbehaviour could occur. + [boo#906574] + * further bug fixes as listed in ChangeLog + ------------------------------------------------------------------- Mon Mar 9 00:43:18 UTC 2015 - p.drouand@gmail.com diff --git a/pcre.spec b/pcre.spec index 3f8b6b1..c1c1780 100644 --- a/pcre.spec +++ b/pcre.spec @@ -1,7 +1,7 @@ # # spec file for package pcre # -# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: pcre -Version: 8.36 +Version: 8.37 Release: 0 Summary: A library for Perl-compatible regular expressions License: BSD-3-Clause