From d038c3e5711790bed326c47199c8d172f89d78cce98002806f079ca0d4cf0486 Mon Sep 17 00:00:00 2001 From: Andreas Stieger Date: Mon, 11 Sep 2017 19:12:21 +0000 Subject: [PATCH] OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/pcre2?expand=0&rev=22 --- pcre2.changes | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/pcre2.changes b/pcre2.changes index ab562d5..3689b6b 100644 --- a/pcre2.changes +++ b/pcre2.changes @@ -25,6 +25,13 @@ Mon Sep 11 18:14:30 UTC 2017 - jengelh@inai.de * The match limit value now also applies to pcre2_dfa_match() as there are patterns that can use up a lot of resources without necessarily recursing very deeply. + * Various minor security fixes found by fuzzers: + + bsc#1037165: crash for forward reference in lookbehind with + PCRE2_ANCHORED + + CVE-2017-8786: heap-based buffer overflow write in pcre2test + (bsc#1036942) + + CVE-2017-7186: DoS by triggering an invalid Unicode property + lookup (bsc#1030066) - Switch source URLs to use HTTP. -------------------------------------------------------------------