buildroot/package/pcre, branch 2019.02-op-build

package/pcre: bump version to 8.42

2018-06-23T20:42:24+00:00

Updated license hash after upstream commit https://vcs.pcre.org/pcre/code/tags/pcre-8.42/LICENCE?r1=1674&r2=1726 Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard

package/pcre: add license hash

2017-11-05T16:45:07+00:00

Signed-off-by: Samuel Martin Signed-off-by: Arnout Vandecappelle (Essensium/Mind)

package/pcre: security bump to version 8.41

2017-07-13T20:13:56+00:00

Removed patches 0003 & 0004, applied upstream. Fixes the following security issues: CVE-2017-7244 - The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file. CVE-2017-7245 - Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file. CVE-2017-7246 - Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 268) or possibly have unspecified other impact via a crafted file. [Peter: add CVE info] Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard

boot, package: use SPDX short identifier for BSD-3c

2017-04-01T13:26:57+00:00

We want to use SPDX identifier for license string as much as possible. SPDX short identifier for BSD-3c is BSD-3-Clause. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/BSD-3c/BSD-3-Clause/g' Signed-off-by: Rahul Bedarkar Signed-off-by: Thomas Petazzoni

pcre: add upstream security fixes

2017-03-31T11:26:03+00:00

Take Debian adapted patches of upstream. Fixes: CVE-2017-6004: crafted regular expression may cause denial of service CVE-2017-7186: invalid Unicode property lookup may cause denial of service Signed-off-by: Baruch Siach Signed-off-by: Peter Korsgaard

pcre: change download location

2017-03-06T20:19:48+00:00

The location at ftp.csx.cam.ac.uk only stores 2 latest versions of PCRE. This results in old (2015.11 and older currently) buildroot versions timing out on wget several times and having to retrieve the package from sources.buildroot.org afterwards. Signed-off-by: Oleg Kitain Signed-off-by: Thomas Petazzoni

pcre: bump to version 8.40

2017-01-13T15:06:45+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

pcre: bump to version 8.39

2016-06-15T07:42:41+00:00

Drop upstream patches and giterize/rebase the other ones. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

pcre: add security patches

2016-06-09T08:36:41+00:00

They address: CVE-2016-1283 - Heap Buffer Overflow Vulnerability. CVE-2016-3191 - workspace overflow for (*ACCEPT) with deeply nested parentheses. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

pcre: enable unicode properties for host variant

2016-03-22T22:03:27+00:00

They're required for host-libglib2 and using system pcre is the default/recommended with newer versions. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni