diff --git a/pcre.spec b/pcre.spec index cea66a8..2ff0594 100644 --- a/pcre.spec +++ b/pcre.spec @@ -70,8 +70,8 @@ Patch11: pcre-8.38-Fix-get_substring_list-bug-when-K-is-used-in-an-asse.patch # Fix pcretest for expressions with a callout inside a look-behind assertion, # upstream bug #1783, fixed in upstream after 8.38 Patch12: pcre-8.38-Fix-pcretest-bad-behaviour-for-callout-in-lookbehind.patch -# Fix workspace overflow for (*ACCEPT) with deeply nested parentheses, -# upstream bug #1791, fixed in upstream after 8.38 +# Fix CVE-2016-3191 (workspace overflow for (*ACCEPT) with deeply nested +# parentheses), upstream bug #1791, fixed in upstream after 8.38 Patch13: pcre-8.38-Fix-workspace-overflow-for-ACCEPT-with-deeply-nested.patch # Fix CVE-2016-1283 (heap buffer overflow in handling of nested duplicate named # groups with a nested back reference), bug #1295386, upstream bug #1767, @@ -299,8 +299,8 @@ make %{?_smp_mflags} check VERBOSE=yes * Thu Feb 11 2016 Petr Pisar - 8.38-7 - Fix pcretest for expressions with a callout inside a look-behind assertion (upstream bug #1783) -- Fix workspace overflow for (*ACCEPT) with deeply nested parentheses - (upstream bug #1791) +- Fix CVE-2016-3191 (workspace overflow for (*ACCEPT) with deeply nested + parentheses) (upstream bug #1791) * Thu Feb 04 2016 Fedora Release Engineering - 8.38-6.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild