Hello community, here is the log from the commit of package pcre2 for openSUSE:Factory checked in at 2017-09-13 21:34:24 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pcre2 (Old) and /work/SRC/openSUSE:Factory/.pcre2.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pcre2" Wed Sep 13 21:34:24 2017 rev:8 rq:523391 version:10.30 Changes: -------- --- /work/SRC/openSUSE:Factory/pcre2/pcre2.changes 2017-08-23 11:52:55.605655801 +0200 +++ /work/SRC/openSUSE:Factory/.pcre2.new/pcre2.changes 2017-09-13 21:34:28.147294989 +0200 @@ -1,0 +2,36 @@ +Mon Sep 11 18:14:30 UTC 2017 - [email protected] + +- Update to new upstream release 10.30 + * The main interpreter, pcre2_match(), has been refactored into + a new version that does not use recursive function calls for + remembering backtracking positions. The new implementation + allows backtracking into recursive group calls in patterns, + making it more compatible with Perl. For patterns that have a + lot of backtracking, the heap is now used, and there is + explicit limit on the amount, settable by + pcre2_set_heap_limit(). The "recursion limit" is retained, + but is renamed as "depth limit". + * The new option PCRE2_ENDANCHORED insists that a pattern match + must end at the end of the subject. + * The new option PCRE2_EXTENDED_MORE implements Perl's /xx + feature, and pcre2test is upgraded to support it. Setting + within the pattern by (?xx) is Also supported. + * (?n) can be used to set PCRE2_NO_AUTO_CAPTURE, because Perl + now has this. + * Additional pattern compile options in the compile context are + now available: PCRE2_EXTRA_ALLOW_SURROGATE_ESCAPES and + PCRE2_EXTRA_BAD_ESCAPE_IS LITERAL. + * The newline type PCRE2_NEWLINE_NUL is now available. + * The match limit value now also applies to pcre2_dfa_match() + as there are patterns that can use up a lot of resources + without necessarily recursing very deeply. + * Various minor security fixes found by fuzzers: + + bsc#1037165: crash for forward reference in lookbehind with + PCRE2_ANCHORED + + CVE-2017-8786: heap-based buffer overflow write in pcre2test + (bsc#1036942) + + CVE-2017-7186: DoS by triggering an invalid Unicode property + lookup (bsc#1030066) +- Switch source URLs to use HTTP. + +------------------------------------------------------------------- Old: ---- pcre2-10.23.tar.bz2 pcre2-10.23.tar.bz2.sig New: ---- pcre2-10.30.tar.bz2 pcre2-10.30.tar.bz2.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pcre2.spec ++++++ --- /var/tmp/diff_new_pack.vNgCH0/_old 2017-09-13 21:34:28.775206643 +0200 +++ /var/tmp/diff_new_pack.vNgCH0/_new 2017-09-13 21:34:28.775206643 +0200 @@ -18,15 +18,15 @@ %define with_libedit 0%{?suse_version} > 1110 Name: pcre2 -Version: 10.23 +Version: 10.30 Release: 0 Summary: A library for Perl-compatible regular expressions License: BSD-3-Clause Group: Development/Libraries/C and C++ Url: http://www.pcre.org/ #SVN-Clone: svn://vcs.exim.org/pcre/code/trunk -Source: ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/%{name}-%{version}.tar.bz2 -Source2: ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/%{name}-%{version}.tar.bz2.sig +Source: https://ftp.pcre.org/pub/pcre/%{name}-%{version}.tar.bz2 +Source2: https://ftp.pcre.org/pub/pcre/%{name}-%{version}.tar.bz2.sig Source3: %{name}.keyring Source4: baselibs.conf #PATCH-FIX-OPENSUSE [email protected] upstream thinks it is good idea to use rpath, taken from RH @@ -57,7 +57,7 @@ Requires: libpcre2-16-0 = %{version} Requires: libpcre2-32-0 = %{version} Requires: libpcre2-8-0 = %{version} -Requires: libpcre2-posix1 = %{version} +Requires: libpcre2-posix2 = %{version} Requires: libstdc++-devel %description devel @@ -126,11 +126,11 @@ libpcre2-32 supports 32-bit and UTF-32 strings. -%package -n libpcre2-posix1 +%package -n libpcre2-posix2 Summary: A library for Perl-compatible regular expressions Group: System/Libraries -%description -n libpcre2-posix1 +%description -n libpcre2-posix2 The PCRE2 library is a set of functions that implement regular expression pattern matching using the same syntax and semantics as Perl 5. @@ -211,8 +211,8 @@ %postun -n libpcre2-16-0 -p /sbin/ldconfig %post -n libpcre2-32-0 -p /sbin/ldconfig %postun -n libpcre2-32-0 -p /sbin/ldconfig -%post -n libpcre2-posix1 -p /sbin/ldconfig -%postun -n libpcre2-posix1 -p /sbin/ldconfig +%post -n libpcre2-posix2 -p /sbin/ldconfig +%postun -n libpcre2-posix2 -p /sbin/ldconfig %files -n libpcre2-8-0 %defattr(-,root,root) @@ -229,7 +229,7 @@ %doc LICENCE %{_libdir}/libpcre2-32.so.* -%files -n libpcre2-posix1 +%files -n libpcre2-posix2 %defattr(-,root,root) %doc LICENCE %{_libdir}/libpcre2-posix.so.* ++++++ baselibs.conf ++++++ --- /var/tmp/diff_new_pack.vNgCH0/_old 2017-09-13 21:34:28.811201579 +0200 +++ /var/tmp/diff_new_pack.vNgCH0/_new 2017-09-13 21:34:28.811201579 +0200 @@ -1,4 +1,4 @@ libpcre2-8-0 libpcre2-16-0 libpcre2-32-0 -libpcre2-posix1 +libpcre2-posix2 ++++++ pcre2-10.23.tar.bz2 -> pcre2-10.30.tar.bz2 ++++++ ++++ 85759 lines of diff (skipped)
