libpcre16-0-32bit-8.45-150000.20.13.1 < > , M b /p9| ef 6Q^7媐: .Y S_D=02 #监c ʕ%RJ2v_ף-Ӓ@hw3$.'tl y:VQ((]: XeuceX*/s
A:kV[5iKohx [dY)4,M?fKs:+0G:(xX?R9i'8zmz"^*
D c]ׯ凄Dr
<2 > > 'P ? '@ d ( Z $ = ^ k
4 < F P t | ( 8 9 H : S > $E G $P H $X I $` X $d Y $p \ $ ] $ ^ $ b $ c % d & e & f & l & u &$ v &, w & x & y & & & & '< C libpcre16-0-32bit 8.45 150000.20.13.1 A library for Perl-compatible regular expressions The PCRE library is a set of functions that implement regular
expression pattern matching using the same syntax and semantics
as Perl 5.
libpcre16 supports 16-bit and UTF-16 strings. b /goat06 fSUSE Linux Enterprise 15 SUSE LLC BSD-3-Clause https://www.suse.com/ System/Libraries http://www.pcre.org/ linux x86_64 /sbin/ldconfig f b /b / b95ba136f234677d3cebc25c0d3da77b5da5d8a2bea8de37c153e1490ce35c19 libpcre16.so.0.2.13 root root root root pcre-8.45-150000.20.13.1.src.rpm libpcre16-0-32bit libpcre16-0-32bit(x86-32) libpcre16.so.0 @ @ @ @ @ @ @
/bin/sh libc.so.6 libc.so.6(GLIBC_2.0) libc.so.6(GLIBC_2.1) libc.so.6(GLIBC_2.1.3) libc.so.6(GLIBC_2.3) libc.so.6(GLIBC_2.3.4) libc.so.6(GLIBC_2.4) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 b{@an@`qZY@Y@Yw2Y1S@XYXW9WaC@VV@UB@T@jsikes@suse.com coolo@suse.com bwiedemann@suse.com fvogt@suse.com kstreitova@suse.com matz@suse.com astieger@suse.com mpluskal@suse.com astieger@suse.com dimstar@opensuse.org astieger@suse.com mpluskal@suse.com astieger@suse.com astieger@suse.com p.drouand@gmail.com - Added pcre-8.45-bsc1199232-unicode-property-matching.patch
* bsc#1199232
* CVE-2022-1586
* Fixes unicode property matching issue - pcre 8.45 (the final release)
* Fixed a small (*MARK) bug in the interpreter (Bugzilla #2771).
- pcre 8.44
* Small patch to pcreposix.c to set the erroroffset field to -1 immediately
after a successful compile, instead of at the start of matching to avoid a
sanitizer complaint (regexec is supposed to be thread safe).
* Check the size of the number after (?C as it is read, in order to avoid
integer overflow. (bsc#1172974, CVE-2020-14155)
* Tidy up left shifts to avoid sanitize warnings; also fix one NULL deference
in pcretest.
- pcre 8.43
* In a pattern such as /[^\x{100}-\x{ffff}]*[\x80-\xff]/ which has a repeated
negative class with no characters less than 0x100 followed by a positive class
with only characters less than 0x100, the first class was incorrectly being
auto-possessified, causing incorrect match failures.
* If the only branch in a conditional subpattern was anchored, the whole
subpattern was treated as anchored, when it should not have been, since the
assumed empty second branch cannot be anchored. Demonstrated by test patterns
such as /(?(1)^())b/ or /(?(?=^))b/.
* Fix subject buffer overread in JIT when UTF is disabled and \X or \R has
a greater than 1 fixed quantifier. This issue was found by Yunho Kim.
(bsc#1172973 CVE-2019-20838)
* If a pattern started with a subroutine call that had a quantifier with a
minimum of zero, an incorrect "match must start with this character" could be
recorded. Example: /(?&xxx)*ABC(?XYZ)/ would (incorrectly) expect 'A' to
be the first character of a match.
- pcre 8.42
* If a backreference with a minimum repeat count of zero was first in a
pattern, apart from assertions, an incorrect first matching character could be
recorded. For example, for the pattern /(?=(a))\1?b/, "b" was incorrectly set
as the first character of a match.
* Fix out-of-bounds read for partial matching of /./ against an empty string
when the newline type is CRLF.
* When matching using the the REG_STARTEND feature of the POSIX API with a
non-zero starting offset, unset capturing groups with lower numbers than a
group that did capture something were not being correctly returned as "unset"
(that is, with offset values of -1).
* Matching the pattern /(*UTF)\C[^\v]+\x80/ against an 8-bit string
containing multi-code-unit characters caused bad behaviour and possibly a
crash. This issue was fixed for other kinds of repeat in release 8.37 by change
38, but repeating character classes were overlooked. - Do not run profiling 'check' in parallel
to make package build reproducible (boo#1040589) - Use %license (boo#1082318) - add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
frame size detection because modern compilers broke it by cloning
and inlining pcre match() function [bsc#1058722] - RunTest needs much stack, on s390x more than the default
8 MB. [bnc#1046102] - pcre 8.41:
* If pcregrep in multiline mode with --only-matching matched
several lines, it restarted scanning at the next line instead
of moving on to the end of the matched string, which can be
several lines after the start.
* Fix a missing else in the JIT compiler reported by 'idaifish'.
CVE-2017-6004 bsc#1025709
* A (?# style comment is now ignored between a basic quantifier
and a following '+' or '?' (example: /X+(?#comment)?Y/.
* Avoid use of a potentially overflowing buffer in pcregrep
* Fix issues reported by fuzzers in pcretest:
- Check for values < 256 when calling isprint() in pcretest.
- Give an error for too big a number after \O.
* In the 32-bit library in non-UTF mode, an attempt to find a
Unicode property for a character with a code point greater than
0x10ffff (the Unicode maximum) caused a crash.
CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
* The alternative matching function, pcre_dfa_exec() misbehaved
if it encountered a character class with a possessive repeat,
for example [a-f]{3}+.
* When pcretest called pcre_copy_substring() in 32-bit mode, it
set the buffer length incorrectly, which could result in buffer
overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803 - Enable jit on aarch64
- Enable profiled building - pcre 8.40:
* Using -o with -M in pcregrep could cause unnecessary repeated
output when the match extended over a line boundary.
* Fix register overwite in JIT when SSE2 acceleration is enabled.
* Ignore "show all captures" (/=) for DFA matching.
* Fix JIT unaligned accesses on x86
* In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
mode), without PCRE_UCP set, a negative character type such as
\D in a positive class should cause all characters greater than
255 to match, whatever else is in the class. There was a bug
that caused this not to happen if a Unicode property item was
added to such a class, for example [\D\P{Nd}] or [\W\pL].
* When pcretest was outputing information from a callout, the
caret indicator for the current position in the subject line
was incorrect if it was after an escape sequence for a
character whose code point was greater than \x{ff}.
* A pattern such as (?abc)(?(R)xyz) was incorrectly compiled
such that the conditional was interpreted as a reference to
capturing group 1 instead of a test for recursion. Any group
whose name began with R was misinterpreted in this way. (The
reference interpretation should only happen if the group's name
is precisely "R".)
* A number of bugs have been mended relating to match start-up
optimizations when the first thing in a pattern is a positive
lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
was *not* set:
+ A pattern such as (?=.*X)X$ was incorrectly optimized as if
it needed both an initial 'X' and a following 'X'.
+ Some patterns starting with an assertion that started with
.* were incorrectly optimized as having to match at the start
of the subject or after a newline. There are cases where this
is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
matches after the start in lines that start with spaces.
Starting .* in an assertion is no longer taken as an
indication of matching at the start (or after a newline). - Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13. - record minor vulnerabilities fixed in 8.39 - Update to version 8.39:
* Some appropriate PCRE2 JIT improvements have been retro-fitted
to PCRE1.
* CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
nested parentheses (boo#971741)
* CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
* Apart from that, this is another bug-fix release. - pcre 8.38:
* CVE-2015-3217: Call Stack Overflow Vulnerability in match()
bsc#933878
* Other fixes to assertions, crashes, buffer overflows and
performance issues found by fuzzer, affecting applications
accepting regular expression from untrusted sources - pcre 8.37:
* CVE-2015-2325: Patterns with certain groups specifying a zero
minimum quantifier caused incorrect code to be compiled,
leading to an incorrect memory read. [boo#924960]
* CVE-2015-2326: Specific patterns containing a forward reference
with subroutine calls caused incorrect code to be compiled
[boo#924961]
* CVE-2014-8964: If an assertion condition was quantified with a
minimum of zero, SIGSEGV or other misbehaviour could occur.
[boo#906574]
* further bug fixes as listed in ChangeLog - Update to version 3.16
* This is primarily a bug-fix release.
* The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag /bin/sh 8.45-150000.20.13.1 8.45-150000.20.13.1 libpcre16.so.0 libpcre16.so.0.2.13 /usr/lib/ -fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:24767/SUSE_SLE-15_Update/b3f414715e9265530a92cf9ceb676799-pcre.SUSE_SLE-15_Update drpm xz 5 x86_64-suse-linux ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f5fddc1185c92e6e2f096fc4c2fe844d6aa29b14, stripped P R R R R R R R utf-8 ffd53aefadca48c1b8922a19e743a3bff8170e9e3e7fd30661203286028d1974 ? 7zXZ
! t/@"H] "k%]drKM|'_{wY ljT<ŝGlU+v)9ջ }ik/w
i` rMluCO ?ڼ4 P07
3f@ -"h)#ԻZP;ůǑ^CGzD? lo skޝreDJ2bcmjrIn
;o{f zS+Y 0͟aV@Mx&E
~cHJ1P&Ѳm|=]%8E i S5K\48U_s64`gmӖ\y#s\fmwD*KYHH
":W
~> ""7G8o8͉UG,FksVŃ X_CۖƠLv ?xpNY @oAr&7s8Q xUNx1F"IXkb=cj
⇣e03 t^.I;އ߽E T&:(eXz>VG)Ql#f 64rrDhqM\> v9HS$
XKbN'FRPy/D!IA9O7ftuSYf0 *#I q ";wIҙdcy`x@)Z [Mk^@
8+h/Z:ފK\ piyZCr[a6g螦3X'#)TCv5
L Nf)*%xĩy')]3>͢4'm6eM8G)D}~P [Kys0u*3&Eȧ7 $t!X,4!S-6!F(DuvSgrC.j^ŗ w ;εh tN9<3;CNoú>JtIVjo,8 4WB&L >ڧ! Hn4/waQi bVH?uY1ppUi\[-%ԕ<믣@^ޙW4kgޑY M%qry
^e Fčg7/8uHtS -{ 6҈l?E$
Ok=7n6-c|y(TiV$
h8[DTK
%$WDFBrD6 <[X jMu;H z*Sq
&YT1m1J|(yS2Y?ɠPeICHj@IPd 'pK͏p)o64Pd,ZXV"iʻA ʪcT K O<8f:Z"V2bPʠ$zdwxe?o 'Jq' j;,@on״6 @|g@74M*5xlhSh>·:bl WR; DcDRgrY# h(
hNa+kTzNq IvnQD0q dDYjQ=19 ,y#v)9>+[yҥvځ<+Uk5'wRB43"oi|rJO\W_Q5H3Y"~/DBꊎ(XLJl*gT7fC<7ܾ[bW&kWErEq ڨ}ycuIWGcJU
ʢ 9fdD~{']
_A%6.D nZ eC )\IuWa`KO~ oj7 Iʹ
\p8^IP yZ >`WVz9f,D?7
Pv`\X4; #j WTwuH:SMIf^5Ws/+8 I+ͽatT$bZb|ccU{j/އ?n,e|8`N]Dm.~ دugROZ˰(xg5Hv s?V~* L3H(DM'7v
(k˓6(_Z*D62
̺O嵿ڱgȆD̠|$@?L)Պu
[˹YI!
3aƋpD8zPxf&hp%rgܲ_AvQo(ՁXW"`G pMHeWvSc^]U(
32=r`td v3 ?6f9O݂U+5Ha+KS~ ʹk6 V4 z$X6
CiAhK5iLQe,lC ej#nȀBHׄퟸzϜ9ԯm<;X (\NLEȞ'tn`> XWLj9[ " YiǡYE{'Z0{'\BMus|5.Nq<[CTd*8Qf~>zuG %6v"]IݿETM=*.[2EB6˜qI:%++!:bT,g5aJv(Ke m*́ o`kNk< 4/lsa!H 0$H
LZZnB
rB( Ha*pvA},= a1+PvdB;sإs$s_EqudVƥd KjuG7eÕԕOz Oz7IjgnQvmWBLѾ;4-V (Q%;k |}_k4 ]T CНvEiVv
ʬg1 i'όbNZ2 'I.vψ%A;oQF X9 h-6Vbu~Y,IZɫyg(JPh+՜B#e& ZdP6EĐ 69W{kACeV\A -HN]΄p3Д!3WtX
D.lMn}{2QgQji^C5ZP̿ Qo
Zx J c-֖==Z_2gLIwf o ^+p
td [ʡWEP7~Jʴ& )Ts*,15Q7>.27șv*zS 31o(S}8f$qѓ߸R`r(-v5(ܥ3iX
91M y1'K$"7 8E QƟh1JDk|kݔXى[<" `oWGn;
Zq`*@gMb
^BmK6 l#EHi(HDl
K%H7ǭjA& dB C\c ;H[\A ctx8h&{Y[ػPLTc K p\=Ʊ#m>ci O5Bh~<9wb!GeE7c / D \+ `" Ch:d,}X Bk0P c֊R.]U&f\ԧGb mXg<'^v>4G_!ܼ*tņwG?86XM
t84> 0,]9kadl!WU$6 _rz:AoAĖU{! /P"{M lqe<ZO:v tA h?&R\BmHN<#еm~$
vcxݬ~i/ƐϨhg0~R83#N8*X$Vz.X#@% æS2 ,;jϾRH ї:9 䌙(lS^+ 0 Q *r9!Ü^Lf!ߍߙ
C'INnRJ9[O˝Kc[ތ=6hSɸ!i E[~Çķk _k5)"@4'+w5X8'
qmcB YOz?!~/ɞ%"R9截ˑ )cZm GmR(>&Z fƊq :s X*S&U=в=Ҽnh+ADíF/ÊggӭlH<_ށ|SS*5}|=1/~Oyp!ZʑM6 ?h>(ӈ _/p؝HBge
2v B 4ïrM(RR`
T~E+hxx TQO QDMvbv4M!
0J Nx&|>_ {`'Q)kIȑ
FG7d 4>G`D3ES"S_֦Qz|w m)$^{XP(ƷA*m nwc ܾ D S8I
YZ