diff options
author | Armin Kuster <akuster@mvista.com> | 2016-01-27 14:20:21 -0800 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2016-01-30 12:13:10 +0000 |
commit | 049be17b533d7c592dae8e0f33ddbae54639a776 (patch) | |
tree | 6dd8ef53b2d0212d6b200fcb561b8442cfe3c1c2 /meta | |
parent | 5e94ac7ba9350aa5ac87955aa216150a0338ff22 (diff) | |
download | poky-049be17b533d7c592dae8e0f33ddbae54639a776.tar.gz |
libpcre: bug fixes include security
[Yocto # 9008]
This is the next patch release for pcre. The 8.xx series now only contains
bug fixes.
http://www.pcre.org/original/changelog.txt
The following security fixes are included:
CVE-2015-3210 pcre: heap buffer overflow in pcre_compile2() / compile_regex()
CVE-2015-3217 pcre: stack overflow in match()
CVE-2015-5073 CVE-2015-8388 pcre: Buffer overflow caused by certain patterns with an unmatched closing parenthesis
CVE-2015-8380 pcre: Heap-based buffer overflow in pcre_exec
CVE-2015-8381 pcre: Heap Overflow in compile_regex()
CVE-2015-8383 pcre: Buffer overflow caused by repeated conditional group
CVE-2015-8384 pcre: Buffer overflow caused by recursive back reference by name within certain group
CVE-2015-8385 pcre: Buffer overflow caused by forward reference by name to certain group
CVE-2015-8386 pcre: Buffer overflow caused by lookbehind assertion
CVE-2015-8387 pcre: Integer overflow in subroutine calls
CVE-2015-8389 pcre: Infinite recursion in JIT compiler when processing certain patterns
CVE-2015-8390 pcre: Reading from uninitialized memory when processing certain patterns
CVE-2015-8392 pcre: Buffer overflow caused by certain patterns with duplicated named groups
CVE-2015-8393 pcre: Information leak when running pcgrep -q on crafted binary
CVE-2015-8394 pcre: Integer overflow caused by missing check for certain conditions
CVE-2015-8395 pcre: Buffer overflow caused by certain references
CVE-2016-1283 pcre: Heap buffer overflow in pcre_compile2 causes DoS
(From OE-Core rev: 3e403cc1bdeefd4f39e54bae2269ca56307e8468)
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta')
-rw-r--r-- | meta/recipes-support/libpcre/libpcre_8.38.bb (renamed from meta/recipes-support/libpcre/libpcre_8.37.bb) | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/meta/recipes-support/libpcre/libpcre_8.37.bb b/meta/recipes-support/libpcre/libpcre_8.38.bb index 1880639a27..c5676073e8 100644 --- a/meta/recipes-support/libpcre/libpcre_8.37.bb +++ b/meta/recipes-support/libpcre/libpcre_8.38.bb | |||
@@ -14,8 +14,8 @@ SRC_URI = "${SOURCEFORGE_MIRROR}/project/pcre/pcre/${PV}/pcre-${PV}.tar.bz2 \ | |||
14 | file://Makefile \ | 14 | file://Makefile \ |
15 | " | 15 | " |
16 | 16 | ||
17 | SRC_URI[md5sum] = "ed91be292cb01d21bc7e526816c26981" | 17 | SRC_URI[md5sum] = "00aabbfe56d5a48b270f999b508c5ad2" |
18 | SRC_URI[sha256sum] = "51679ea8006ce31379fb0860e46dd86665d864b5020fc9cd19e71260eef4789d" | 18 | SRC_URI[sha256sum] = "b9e02d36e23024d6c02a2e5b25204b3a4fa6ade43e0a5f869f254f49535079df" |
19 | 19 | ||
20 | S = "${WORKDIR}/pcre-${PV}" | 20 | S = "${WORKDIR}/pcre-${PV}" |
21 | 21 | ||