]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
libpcre2: Fix CVE-2017-8786
authorRobert Yang <liezhi.yang@windriver.com>
Wed, 30 Aug 2017 00:48:56 +0000 (17:48 -0700)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 30 Aug 2017 10:19:35 +0000 (11:19 +0100)
commitdd63a26fedb8a578d34850ede4c27e26b8876e7e
tree68e680fa8e0d85bdbad0573a17e1ae0e32c66193
parent9a661bca9d9dd03627a5efaea0f9247394f05b0e
libpcre2: Fix CVE-2017-8786

The pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of
service (heap-based buffer overflow) or possibly have unspecified other impact
via a crafted regular expression.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-support/libpcre/libpcre2/libpcre2-CVE-2017-8786.patch [new file with mode: 0644]
meta/recipes-support/libpcre/libpcre2_10.23.bb