From 6a01b14754475408ec790fd3001b6ca477080ae7e514eac8060b8534f3bf96d9 Mon Sep 17 00:00:00 2001
From: Stephan Kulow <coolo@suse.com>
Date: Fri, 1 May 2015 06:16:13 +0000
Subject: [PATCH] Accepting request 304864 from
 home:AndreasStieger:branches:Base:System

pcre 8.37
CVE-2015-2325 [boo#924960]
CVE-2015-2326 [boo#924961]
CVE-2014-8964 [boo#906574]

OBS-URL: https://build.opensuse.org/request/show/304864
OBS-URL: https://build.opensuse.org/package/show/Base:System/pcre?expand=0&rev=66
---
 pcre-8.36.tar.bz2     |   3 ---
 pcre-8.36.tar.bz2.sig | Bin 287 -> 0 bytes
 pcre-8.37.tar.bz2     |   3 +++
 pcre-8.37.tar.bz2.sig | Bin 0 -> 287 bytes
 pcre.changes          |  15 +++++++++++++++
 pcre.spec             |   4 ++--
 6 files changed, 20 insertions(+), 5 deletions(-)
 delete mode 100644 pcre-8.36.tar.bz2
 delete mode 100644 pcre-8.36.tar.bz2.sig
 create mode 100644 pcre-8.37.tar.bz2
 create mode 100644 pcre-8.37.tar.bz2.sig

diff --git a/pcre-8.36.tar.bz2 b/pcre-8.36.tar.bz2
deleted file mode 100644
index 100317d..0000000
--- a/pcre-8.36.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ef833457de0c40e82f573e34528f43a751ff20257ad0e86d272ed5637eb845bb
-size 1533818
diff --git a/pcre-8.36.tar.bz2.sig b/pcre-8.36.tar.bz2.sig
deleted file mode 100644
index 5222e421b0ec0aac5fe2bead8c26c9961148094693d74bb03ca7016b2bbe644f..0000000000000000000000000000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 287
zcmV+)0pR|L0UQJX0RjL91p-thFt`8;2@scN;Dq}RL)c6v2mf=92J*p8k^?U&yEvF3
zw5Eq-F7(A{W0gSO;Q^So#OjX0{MQpWHNP2LPqH{naJdNOmsmaJ-HayAeve{;!Q=-@
zh&vs-B1owRlyYuJy~TSNaKA+#<eI=4`Nqx_$?hAi+Py?+QK$wN$brof!T{+JD}s^?
zl;2F(Da*kEU<0?QVKnOZq!K?yU}}akd^fN&SFOOAkbkt77ZMlRo7FI;@g+itUBiyF
zyFD-tM&c~X>Bp#sR+8Rh{qDGvH+UiC+?Te~wU&!8P1kV?l9)Z$+JCp&j!O<@`!T}P
l_;~iRI<Oj~^@Ps)tjhHD>qP`PePNKQg$Z0%1tuHi86g)2i5&m{

diff --git a/pcre-8.37.tar.bz2 b/pcre-8.37.tar.bz2
new file mode 100644
index 0000000..5380341
--- /dev/null
+++ b/pcre-8.37.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:51679ea8006ce31379fb0860e46dd86665d864b5020fc9cd19e71260eef4789d
+size 1557603
diff --git a/pcre-8.37.tar.bz2.sig b/pcre-8.37.tar.bz2.sig
new file mode 100644
index 0000000000000000000000000000000000000000000000000000000000000000..42b6a487c50aa9e133cccbb369775d2d1ad07363d3f9b38ab322f0824ca3e2f1
GIT binary patch
literal 287
zcmV+)0pR|L0UQJX0SEvF1p-w+aXJ7B2@scN;Dq}RL)g@)2mA>d=p;I7e>;G<j@>^x
zS5_VaZfFQlD0276au}6OK`c-ZfN@k8bP{zt%-g@GRmBRBho*cTr93u<k+Q}{C~YXm
zUZK5UO6|X5sE&!~6CB~lZF;Z^P0P*n$i(8GX6lS>aCH(>_oKXGXEynK{R@0lln?9v
z0N^dy3tw~E629fB%JHe#9EGDFZO30q4b4CWQv{+3I-B5W45xsudG(7CTm4>rQ9^X5
zN3EcOcPkUT$G~E$<V~leqtB$-8)J_7YTvP(AG}oPte1@f4`6&9R7YbqiRU@@_onTg
lI2qc7@ta_;Do=+;Z#>iDOI*0W&zkqYfwkap=<<Ia_O&MMiG~0G

literal 0
HcmV?d00001

diff --git a/pcre.changes b/pcre.changes
index 6cace07..d0ad046 100644
--- a/pcre.changes
+++ b/pcre.changes
@@ -1,3 +1,18 @@
+-------------------------------------------------------------------
+Thu Apr 30 22:08:31 UTC 2015 - astieger@suse.com
+
+- pcre 8.37:
+  * CVE-2015-2325: Patterns with certain groups specifying a zero
+    minimum quantifier caused incorrect code to be compiled,
+    leading to an incorrect memory read. [boo#924960]
+  * CVE-2015-2326: Specific patterns containing a forward reference
+    with subroutine calls caused incorrect code to be compiled
+    [boo#924961]
+  * CVE-2014-8964: If an assertion condition was quantified with a
+    minimum of zero, SIGSEGV or other misbehaviour could occur.
+    [boo#906574]
+  * further bug fixes as listed in ChangeLog
+
 -------------------------------------------------------------------
 Mon Mar  9 00:43:18 UTC 2015 - p.drouand@gmail.com
 
diff --git a/pcre.spec b/pcre.spec
index 3f8b6b1..c1c1780 100644
--- a/pcre.spec
+++ b/pcre.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package pcre
 #
-# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           pcre
-Version:        8.36
+Version:        8.37
 Release:        0
 Summary:        A library for Perl-compatible regular expressions
 License:        BSD-3-Clause