Commit graph

5 commits

Author SHA1 Message Date
Thomas Heil
db1a4ab49a [libs/pcre]: fix CVE-2017-7186
Fix CVE-2017-7186 mentioned in https://bugs.exim.org/show_bug.cgi?id=2052

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2017-03-27 10:03:16 +02:00
heil
c0c1f314ef pcre: bump to version 8.39
Signed-off-by: heil <heil@terminal-consulting.de>
2016-06-21 00:56:41 +02:00
heil
cb6418bec4 pcre: Integrate pending patches for next upstream version 8.39
- Fix auto-callout
    (http://vcs.pcre.org/viewvc?view=rev&revision=1611)
 -  Fix negated POSIX class within negated overall class UCP
    (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1612 2f5784b3-3f2a-0410-8824-cb99058d5e15)
 - Fix bug for isolated \E between an item and its qualifier when auto callout is set.
    (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1613 2f5784b3-3f2a-0410-8824-cb99058d5e15)
 - Give error for regexec with pmatch=NULL and REG_STARTEND set
    (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1614 2f5784b3-3f2a-0410-8824-cb99058d5e15)
 - Fix \Q\E before qualifier bug when auto callouts are
   (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1616 2f5784b3-3f2a-0410-8824-cb99058d5e15)
 - Fix /x bug when pattern starts with white space and (?-x)
   (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1617 2f5784b3-3f2a-0410-8824-cb99058d5e15)
 - Fix copy named substring bug.
   (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1618 2f5784b3-3f2a-0410-8824-cb99058d5e15)
 - Fix (by hacking) another length computation issue.
   (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1619 2f5784b3-3f2a-0410-8824-cb99058d5e15

 - Fix get_substring_list() bug when \K is used in an assertion.
   (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1620 2f5784b3-3f2a-0410-8824-cb99058d5e15

 - Fix pcretest bad behaviour for callout in lookbehind.
   (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1625 2f5784b3-3f2a-0410-8824-cb99058d5e15

 - Fix workspace overflow for (*ACCEPT) with deeply nested
   (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1631 2f5784b3-3f2a-0410-8824-cb99058d5e15
   fixes CVE-2016-3191

 - Fix Yet another duplicate name bugfix by overestimating the memory needed (i.e. another hack - PCRE2 has this "properly" fixed).
   (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1636 2f5784b3-3f2a-0410-8824-cb99058d5e15

 - Fix pcretest loop for global matching with an ovector size
   (git-svn-id: svn://vcs.exim.org/pcre/code/trunk@1637 2f5784b3-3f2a-0410-8824-cb99058d5e15

Signed-off-by: heil <heil@terminal-consulting.de>
2016-03-29 13:02:34 +02:00
heil
1d3a098bb9 pcre: upgrade to 0.8.38
fixes:
  * CVE 2015-2327 CVE 2015-2328 CVE 2015-8380 CVE 2015-8381 CVE
  * 2015-8382
  * CVE 2015-8383 CVE 2015-8384 CVE 2015-8385 CVE 2015-8386 CVE
  * 2015-8387
  * CVE 2015-8388 CVE 2015-8389 CVE 2015-8390 CVE 2015-8391 CVE
  * 2015-8392
  * CVE 2015-8393 CVE 2015-8394 CVE 2015-8395

Signed-off-by: heil <heil@terminal-consulting.de>
2016-01-25 14:05:02 +01:00
heil
183ec8af2e pcre: fix CVE-2015-3210
- should fix eap buffer overflow in pcre_compile2() / compile_regex()

Signed-off-by: heil <heil@terminal-consulting.de>
2015-06-08 18:14:46 +02:00