Upstream bug #1791 is known as CVE-2016-3191

This commit is contained in:
Petr Písař 2016-03-18 12:15:58 +01:00
parent 3b66458946
commit e34f349480

View File

@ -70,8 +70,8 @@ Patch11: pcre-8.38-Fix-get_substring_list-bug-when-K-is-used-in-an-asse.patch
# Fix pcretest for expressions with a callout inside a look-behind assertion,
# upstream bug #1783, fixed in upstream after 8.38
Patch12: pcre-8.38-Fix-pcretest-bad-behaviour-for-callout-in-lookbehind.patch
# Fix workspace overflow for (*ACCEPT) with deeply nested parentheses,
# upstream bug #1791, fixed in upstream after 8.38
# Fix CVE-2016-3191 (workspace overflow for (*ACCEPT) with deeply nested
# parentheses), upstream bug #1791, fixed in upstream after 8.38
Patch13: pcre-8.38-Fix-workspace-overflow-for-ACCEPT-with-deeply-nested.patch
# Fix CVE-2016-1283 (heap buffer overflow in handling of nested duplicate named
# groups with a nested back reference), bug #1295386, upstream bug #1767,
@ -299,8 +299,8 @@ make %{?_smp_mflags} check VERBOSE=yes
* Thu Feb 11 2016 Petr Pisar <ppisar@redhat.com> - 8.38-7
- Fix pcretest for expressions with a callout inside a look-behind assertion
(upstream bug #1783)
- Fix workspace overflow for (*ACCEPT) with deeply nested parentheses
(upstream bug #1791)
- Fix CVE-2016-3191 (workspace overflow for (*ACCEPT) with deeply nested
parentheses) (upstream bug #1791)
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 8.38-6.1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild