Robert Yang d5f2604669 libpcre2: Fix CVE-2017-7186 ...

A fuzz on libpcre1 through the pcretest utility revealed an invalid read in the
library. For who is interested in a detailed description of the bug, will
follow a feedback from upstream:

This was a genuine bug in the 32-bit library. Thanks for finding it. The crash
was caused by trying to find a Unicode property for a code value greater than
0x10ffff, the Unicode maximum, when running in non-UTF mode (where character
values can be up to 0xffffffff).

(From OE-Core rev: 1b87201784e733f3a9d436f56cb5a6151ba6bdfa)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-08-31 17:41:41 +01:00

..

libpcre

libpcre: 8.38 -> 8.39

2016-07-12 23:10:14 +01:00

libpcre2

libpcre2: Fix CVE-2017-7186

2017-08-31 17:41:41 +01:00

libpcre2_10.23.bb

libpcre2: Fix CVE-2017-7186

2017-08-31 17:41:41 +01:00

libpcre_8.41.bb

libpcre: upgrade 8.40 -> 8.41

2017-07-30 08:46:19 +01:00