Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package pcre2 for openSUSE:Factory checked in at 2026-09-02 16:58:01 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pcre2 (Old) and /work/SRC/openSUSE:Factory/.pcre2.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pcre2" Wed Sep 2 16:58:01 2026 rev:38 rq:1374973 version:10.48 Changes: -------- --- /work/SRC/openSUSE:Factory/pcre2/pcre2.changes 2025-10-28 14:45:05.147202852 +0100 +++ /work/SRC/openSUSE:Factory/.pcre2.new.1265/pcre2.changes 2026-09-02 16:58:04.059599622 +0200 @@ -1,0 +2,48 @@ +Mon Aug 31 19:05:45 UTC 2026 - Andreas Stieger <[email protected]> + +- Update to 10.48: + * GHSA-2p8c-ff85-vh9x: If pcre2_jit_compile() is called with + options for some match modes, and then pcre2_match() is used to + perform a match for a different match mode, an out-of-bounds + read can occur if the match is attempted against invalid UTF + input. + (boo#1277708) + * GHSA-q8g2-wprr-34m9: If pcre2_convert() is called on untrusted + input on platforms with 32-bit size_t, an out-of-bounds heap + write can occur + (boo#1277707) + * GHSA-3r4p-g7gg-ppmf: Fixed an out-of-bounds write in DFA + matching when using a heap limit; also fixed possible integer + overflows which could cause under-allocation of the workspace. + (boo#1277713) + * GHSA-fmgr-6ggq-9859: Added bounds checks for several integer + overflows while compiling patterns on 32-bit CPUs, which could + cause under-allocation followed by out-of-bounds writes. + (boo#1277709) + * GHSA-9qww-pwc4-77qq: Applied lower buffer bound to prevent two + out-of-bounds reads while scanning backwards through invalid + UTF data with PCRE2_MATCH_INVALID_UTF. + (boo#1277710) + * Fix a JIT-specific matching bug affecting prefix scanning on + patterns with repeats + * Fix a JIT-specific matching bug in variable-length lookbehinds + * Miscompiled Unicode character classes combining characters at + or below U+00FF with characters at U+0100 and U+8000 or above + * Incorrect JIT character advancement with + PCRE2_MATCH_INVALID_UTF in UTF-8 and UTF-16 modes, which could + skip adjacent characters + * Update Unicode support to Unicode 17.0 + * Fix a leak and later invalid free when calling the fast-path + pcre2_jit_match() function with a match data object previously + used with pcre2_match() and PCRE2_COPY_MATCHED_SUBJECT. + (boo#1277711) + * GHSA-q7rw-r7qq-2hx6: Fix exposure of two uninitialised bytes + from malloc() via pcre2_serialize_encode() + (boo#1277712) + +------------------------------------------------------------------- +Mon Aug 31 18:22:43 UTC 2026 - Andreas Stieger <[email protected]> + +- Fix (all) rpmlint warnings + +------------------------------------------------------------------- Old: ---- pcre2-10.47.tar.bz2 pcre2-10.47.tar.bz2.sig New: ---- pcre2-10.48.tar.bz2 pcre2-10.48.tar.bz2.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pcre2.spec ++++++ --- /var/tmp/diff_new_pack.0SfIkm/_old 2026-09-02 16:58:05.716657364 +0200 +++ /var/tmp/diff_new_pack.0SfIkm/_new 2026-09-02 16:58:05.718657434 +0200 @@ -2,7 +2,7 @@ # spec file for package pcre2 # # Copyright (c) 2024 SUSE LLC -# Copyright (c) 2025 Andreas Stieger <[email protected]> +# Copyright (c) 2026 Andreas Stieger <[email protected]> # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -19,13 +19,13 @@ %global _lto_cflags %{_lto_cflags} -ffat-lto-objects Name: pcre2 -Version: 10.47 +Version: 10.48 Release: 0 Summary: A library for Perl-compatible regular expressions # code: BSD-3-Clause WITH PCRE2-exception # testdata: Public Domain # JIT-compiler: BSD-2-Clause -License: BSD-2-Clause AND BSD-3-Clause WITH PCRE2-exception AND SUSE-Public-Domain +License: BSD-2-Clause AND BSD-3-Clause WITH PCRE2-exception AND LicenseRef-SUSE-Public-Domain Group: Development/Libraries/C and C++ URL: https://pcre2project.github.io/pcre2/ Source0: https://github.com/PCRE2Project/pcre2/releases/download/%{name}-%{version}/%{name}-%{version}.tar.bz2 @@ -37,11 +37,11 @@ Patch1: pcre2-10.10-multilib.patch BuildRequires: autoconf BuildRequires: automake -BuildRequires: gcc-c++ -BuildRequires: libbz2-devel -BuildRequires: libedit-devel +BuildRequires: c++_compiler BuildRequires: libtool BuildRequires: pkgconfig +BuildRequires: pkgconfig(bzip2) +BuildRequires: pkgconfig(libedit) BuildRequires: pkgconfig(zlib) %description @@ -213,6 +213,9 @@ %make_install mkdir -p %{buildroot}/%{_defaultdocdir} mv %{buildroot}%{_datadir}/doc/pcre2 %{buildroot}/%{_defaultdocdir}/pcre2-doc +rm %{buildroot}/%{_defaultdocdir}/pcre2-doc/LICENCE.md +rm %{buildroot}/%{_defaultdocdir}/pcre2-doc/README + #empty dependecy_libs find %{buildroot} -type f -name "*.la" -delete -print @@ -227,7 +230,7 @@ %files -n libpcre2-8-0 %license LICENCE.md -%doc AUTHORS.md ChangeLog NEWS README +%doc AUTHORS.md ChangeLog NEWS %{_libdir}/libpcre2-8.so.* %files -n libpcre2-16-0 @@ -251,15 +254,19 @@ %files doc %license LICENCE.md -%doc AUTHORS.md ChangeLog NEWS README +%doc AUTHORS.md ChangeLog NEWS %doc doc/html doc/*.txt %doc %{_defaultdocdir}/pcre2-doc %files devel %license LICENCE.md %{_bindir}/pcre2-config -%{_includedir}/* -%{_libdir}/*.so +%{_includedir}/pcre2.h +%{_includedir}/pcre2posix.h +%{_libdir}/libpcre2-8.so +%{_libdir}/libpcre2-16.so +%{_libdir}/libpcre2-32.so +%{_libdir}/libpcre2-posix.so %{_libdir}/pkgconfig/libpcre2-8.pc %{_libdir}/pkgconfig/libpcre2-16.pc %{_libdir}/pkgconfig/libpcre2-32.pc ++++++ pcre2-10.10-multilib.patch ++++++ --- /var/tmp/diff_new_pack.0SfIkm/_old 2026-09-02 16:58:05.769659211 +0200 +++ /var/tmp/diff_new_pack.0SfIkm/_new 2026-09-02 16:58:05.772659315 +0200 @@ -8,11 +8,11 @@ pcre2-config.in | 12 ------------ 1 file changed, 12 deletions(-) -Index: pcre2-10.10/pcre2-config.in +Index: pcre2-10.48/pcre2-config.in =================================================================== ---- pcre2-10.10.orig/pcre2-config.in 2014-10-17 17:07:57.000000000 +0200 -+++ pcre2-10.10/pcre2-config.in 2015-06-18 20:56:20.000000000 +0200 -@@ -28,19 +28,7 @@ if test $# -eq 0; then +--- pcre2-10.48.orig/pcre2-config.in ++++ pcre2-10.48/pcre2-config.in +@@ -28,29 +28,7 @@ if test $# -eq 0; then fi libR= @@ -26,9 +26,19 @@ -esac - libS= --if test @libdir@ != /usr/lib ; then -- libS=-L@libdir@ --fi +-case "@libdir@" in +- # system locations on Linux, no -L needed +- /usr/lib|/usr/lib32|/usr/lib64|/usr/lib/*-gnu*) +- ;; +- /lib|/lib32|/lib64|/lib/*-gnu*) +- ;; +- # system locations on AIX and Solaris, no -L needed +- /usr/lib/64|/usr/lib/amd*|/usr/lib/sparc*|/usr/lib/ppc*) +- ;; +- *) +- libS="-L@libdir@" +- ;; +-esac while test $# -gt 0; do case "$1" in ++++++ pcre2-10.47.tar.bz2 -> pcre2-10.48.tar.bz2 ++++++ ++++ 36015 lines of diff (skipped)
