From 7f279225271daa3e0d60e1229aa911d866d52da3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20P=C3=ADsa=C5=99?= Date: Thu, 20 Nov 2014 17:31:04 +0100 Subject: [PATCH] bug #1165626 is CVE-2014-8964 --- pcre.spec | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/pcre.spec b/pcre.spec index 7193bce..0f8f71f 100644 --- a/pcre.spec +++ b/pcre.spec @@ -17,7 +17,7 @@ Patch1: pcre-8.32-refused_spelling_terminated.patch # bug #1161587, in upstream after 8.36 Patch2: pcre-8.36-Fix-bug-when-there-are-unset-groups-prior-to-ACCEPT-.patch # Fix unused memory usage on zero-repeat assertion condition, bug #1165626, -# in upstream after 8.36 +# CVE-2014-8964, in upstream after 8.36 Patch3: pcre-8.36-Fix-zero-repeat-assertion-condition-bug.patch BuildRequires: readline-devel # New libtool to get rid of rpath @@ -133,7 +133,8 @@ make %{?_smp_mflags} check VERBOSE=yes %changelog * Thu Nov 20 2014 Petr Pisar - 8.36-3 -- Fix unused memory usage on zero-repeat assertion condition (bug #1165626) +- Fix CVE-2014-8964 (unused memory usage on zero-repeat assertion condition) + (bug #1165626) * Fri Nov 07 2014 Petr Pisar - 8.36-2 - Reset non-matched groups within capturing group up to forced match