bug #1165626 is CVE-2014-8964

This commit is contained in:
Petr Písař 2014-11-20 17:31:04 +01:00
parent b2b6fa45ca
commit 7f27922527

View File

@ -17,7 +17,7 @@ Patch1: pcre-8.32-refused_spelling_terminated.patch
# bug #1161587, in upstream after 8.36
Patch2: pcre-8.36-Fix-bug-when-there-are-unset-groups-prior-to-ACCEPT-.patch
# Fix unused memory usage on zero-repeat assertion condition, bug #1165626,
# in upstream after 8.36
# CVE-2014-8964, in upstream after 8.36
Patch3: pcre-8.36-Fix-zero-repeat-assertion-condition-bug.patch
BuildRequires: readline-devel
# New libtool to get rid of rpath
@ -133,7 +133,8 @@ make %{?_smp_mflags} check VERBOSE=yes
%changelog
* Thu Nov 20 2014 Petr Pisar <ppisar@redhat.com> - 8.36-3
- Fix unused memory usage on zero-repeat assertion condition (bug #1165626)
- Fix CVE-2014-8964 (unused memory usage on zero-repeat assertion condition)
(bug #1165626)
* Fri Nov 07 2014 Petr Pisar <ppisar@redhat.com> - 8.36-2
- Reset non-matched groups within capturing group up to forced match