linux/poky.git/meta/recipes-support/libpcre, branch thud

libpcre2: update to 10.31

2018-05-04T12:28:02+00:00

LICENSE changed do to updating copyrige date (From OE-Core rev: 20e589f0cdae0b062231891f8597c4d90110ceee) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libpcre: 8.41 -> 8.42

2018-05-04T12:28:01+00:00

License-Update: The checksum of LIC_FILES_CHKSUM has been changed due to time update of copyright LICENCE to 2018. The content of LICENCE has no change. (From OE-Core rev: 7e3b2e462172a8fd457e50726b9cd167736d2347) Signed-off-by: Andrej Valek Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libpcre-ptest: skip locale test

2018-03-31T08:48:43+00:00

If a fr_FR locale is found, it is automatically tested. The test will fail if the locale is UTF-8, as the test blindly assumes (and expects) a non-UTF fr_FR locale. The remedy is to skip the test. [YOCTO #12215] (From OE-Core rev: 4cedddb83623c79980b354642dfeaf78218ca4b7) Signed-off-by: Juro Bystricky Signed-off-by: Richard Purdie

libpcre: refresh patches

2018-03-07T14:34:51+00:00

The patch tool will apply patches by default with "fuzz", which is where if the hunk context isn't present but what is there is close enough, it will force the patch in. Whilst this is useful when there's just whitespace changes, when applied to source it is possible for a patch applied with fuzz to produce broken code which still compiles (see #10450). This is obviously bad. We'd like to eventually have do_patch() rejecting any fuzz on these grounds. For that to be realistic the existing patches with fuzz need to be rebased and reviewed. (From OE-Core rev: eb7632f593b81066da4de44bc001974d6726a118) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libpcre2: add packages for 16-bit and 32-bit code unit support

2018-01-06T22:32:22+00:00

The packages loosely follow the debian package names. In that way more projects, e.g. Qt5 for 16-bit, are able use system libraries. This does not change the existing default package. (From OE-Core rev: 5ce6409fd588605648a51bd2f5825fd9ae147f79) Signed-off-by: Stefan Müller-Klieser Signed-off-by: Richard Purdie

libpcre2: update to 10.30

2017-11-07T13:25:31+00:00

LICENSE files changed: Amend licence to relax its conditions for chains of binary distributions. removed included patches includes CVE-2017-8399 (From OE-Core rev: d8ea0674d1feee803b75cf837e8d029619f8d663) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libpcre2: Fix CVE-2017-7186

2017-08-31T16:41:41+00:00

A fuzz on libpcre1 through the pcretest utility revealed an invalid read in the library. For who is interested in a detailed description of the bug, will follow a feedback from upstream: This was a genuine bug in the 32-bit library. Thanks for finding it. The crash was caused by trying to find a Unicode property for a code value greater than 0x10ffff, the Unicode maximum, when running in non-UTF mode (where character values can be up to 0xffffffff). (From OE-Core rev: 1b87201784e733f3a9d436f56cb5a6151ba6bdfa) Signed-off-by: Robert Yang Signed-off-by: Richard Purdie

libpcre2: Fix CVE-2017-8786

2017-08-31T16:41:41+00:00

The pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression. (From OE-Core rev: dd63a26fedb8a578d34850ede4c27e26b8876e7e) Signed-off-by: Robert Yang Signed-off-by: Richard Purdie

libpcre: upgrade 8.40 -> 8.41

2017-07-30T07:46:19+00:00

(From OE-Core rev: 07c5eb7f9232ecd4a094040cbe85af2727bd2bd5) Signed-off-by: Andrej Valek Signed-off-by: Richard Purdie

libpcre2_10.23.bb: set CVE_PRODUCT to pcre2

2017-07-24T08:13:31+00:00

It is used in NVD as product name for CVE's like: https://nvd.nist.gov/vuln/detail/CVE-2017-8786 (From OE-Core rev: ce32c5b8ee77012b36c74323f298dc561741aebd) Signed-off-by: Mikko Rapeli Signed-off-by: Ross Burton Signed-off-by: Richard Purdie