Changelog for libpcre1-8.39-3.10.3.i586.rpm :
Wed Oct 26 14:00:00 2016
- Update to PCRE 8.39 FATE#320298 bsc#972127.
This version fixes a number of vulnerabilities that affect pcre
and applications using the libary when accepting untrusted input
as regular expressions or as part thereof. Remote attackers could
have caused the application to crash, disclose information or
potentially execute arbitrary code.

* CVE-2015-3210: heap buffer overflow in pcre_compile2() / compile_regex() (bsc#933288)

* CVE-2015-3217: pcre: PCRE Library Call Stack Overflow Vulnerability in match() (bsc#933878)

* CVE-2015-5073: pcre: Library Heap Overflow Vulnerability in find_fixedlength() (bsc#936227)

* bsc#942865: heap overflow in compile_regex()

* CVE-2015-8380: pcre: heap overflow in pcre_exec (bsc#957566)

* bsc#957598: various security issues fixed in pcre 8.37 and 8.38 release

* CVE-2016-1283: pcre: Heap buffer overflow in pcre_compile2 causes DoS (bsc#960837)

* CVE-2016-3191: pcre: workspace overflow for (
*ACCEPT) with deeply nested parentheses (bsc#971741)

Thu Apr 30 14:00:00 2015
- pcre 8.37:

* CVE-2015-2325: Patterns with certain groups specifying a zero
minimum quantifier caused incorrect code to be compiled,
leading to an incorrect memory read. [boo#924960]

* CVE-2015-2326: Specific patterns containing a forward reference
with subroutine calls caused incorrect code to be compiled

* CVE-2014-8964: If an assertion condition was quantified with a
minimum of zero, SIGSEGV or other misbehaviour could occur.

* further bug fixes as listed in ChangeLog

Mon Mar 9 13:00:00 2015
- Update to version 3.16

* This is primarily a bug-fix release.

* The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete \"Obsoletes\" tag

Tue Sep 2 14:00:00 2014
- Improve on RPM group classification
- Remove defunct %gpg_verify (replaced by source validators),
defunct freecode link

Thu Aug 28 14:00:00 2014
- Harden build with full RELRO as this libraries end linked
to at least one setuid root executable.

Mon Jun 16 14:00:00 2014
- Enable JIT on ppc64le as well

Sat May 3 14:00:00 2014
- update to 0.35:
There have been performance improvements for classes containing non-ASCII
characters and the \"auto-possessification\" feature has been extended. Other
minor improvements have been implemented and bugs fixed. There is a new callout
feature to enable applications to do detailed stack checks at compile time, to
avoid running out of stack for deeply nested parentheses. The JIT compiler has
been extended with experimental support for ARM-64, MIPS-64, and PPC-LE.
- add pcre-commit1472.patch from SVN to work with gcc49, see

Sun Mar 23 13:00:00 2014
- Add automake and autoconf as explicit deps as we run autoreconf

Sun Mar 23 13:00:00 2014
- Add patch pcre-8.21-multilib.patch to fix RPATH issues.

* The patch is taken from RedHat.

Sun Mar 23 13:00:00 2014
- Clean up with the spec cleaner. Use -j1 in tests as it is not
really thread safe

Sun Mar 23 13:00:00 2014
- Version bump to 8.34:

* warning fixes

* perl fixes

* unocode6.3.0 support

* gconv support

Wed Nov 13 13:00:00 2013
- enable tests for all archs
- --enable-jit for sparc

Thu Jun 13 14:00:00 2013
- Update to new upstream release 8.33

* The Just-In-Time compiler (JIT) now supports all pattern
features, including callouts and the backtracking verbs. In
addition, some bugs are fixed and there are minor performance
- More robust make install call. Provide signature verification
files (avoid depending on gpg-offline due to bootstrap cycle).

Sat Jun 8 14:00:00 2013
- Ensure the PCRE library and tools are built with large file
support in 32 bit archs.

Sun Jan 6 13:00:00 2013
- Update to 8.32 version:

* There is now support for 32-bit character strings and UTF-32. Like the
16-bit support, this is done by compiling a separate 32-bit library.

* \\X now matches a Unicode extended grapheme cluster.

* Case-independent matching of Unicode characters that have more than one
\"other case\" now makes all three (or more) characters equivalent. This
applies, for example, to Greek Sigma, which has two lowercase versions.

* Unicode character properties are updated to Unicode 6.2.0.

* The EBCDIC support, which had decayed, has had a spring clean.

* A number of JIT optimizations have been added, which give faster JIT
execution speed. In addition, a new direct interface to JIT execution is
available. This bypasses some of the sanity checks of pcre_exec() to give a
noticeable speed-up.

* A number of issues in pcregrep have been fixed, making it more compatible
with GNU grep. In particular, --exclude and --include (and variants) apply
to all files now, not just those obtained from scanning a directory
recursively. In Windows environments, the default action for directories is
now \"skip\" instead of \"read\" (which provokes an error).

* If the --only-matching (-o) option in pcregrep is specified multiple
times, each one causes appropriate output. For example, -o1 -o2 outputs the
substrings matched by the 1st and 2nd capturing parentheses. A separating
string can be specified by --om-separator (default empty).

* When PCRE is built via Autotools using a version of gcc that has the
\"visibility\" feature, it is used to hide internal library functions that are
not part of the public API.
- updated and versionned pcre-visibility.patch to svn trunk

* Modifications on and makefile have been merged on upstream release

Fri Nov 23 13:00:00 2012
- Update package descriptions about the differences between the
PCRE library subpackages.

Wed Nov 7 13:00:00 2012
- Use the --enable-pcre16 configure flag.
This switch enables 16 bit character support that will be required by Qt5

Fri Aug 17 14:00:00 2012
- Upate to version 8.31:
+ The JIT compiler now supports partial matching and the (
and (
*COMMIT) verbs
+ PCRE_INFO_MAXLOOKBEHIND can be used to find the longest
lookbehing in a pattern.
+ There should be a performance improvement when using the heap
instead of the stack for recursion
+ pcregrep can now be linked with libedit as an alternative to
+ pcregrep now has a --file-list option where the list of files
to scan is given as a file
+ pcregrep now recognizes binary files and there are related
+ The Unicode tables have been updated to 6.1.0
- Rebase pcre-visibility.patch.

Thu Jul 19 14:00:00 2012
- Only use --enable-jit on supported architectures; the build will
otherwise fail (e.g. on sparc).

Thu May 10 14:00:00 2012
- Add devel-static package

Tue Feb 7 13:00:00 2012
- fix baselibs

Tue Feb 7 13:00:00 2012
- Update to PCRE 8.30, upstream SONAME bump, libpcre1
- Drop no longer needed ppc patch.
- move library back to %{_libdir}

Wed Feb 1 13:00:00 2012
- Fix cache-flush on PPC

Wed Nov 16 13:00:00 2011
- add libtool as buildrequire to avoid implicit dependency

Tue Nov 1 13:00:00 2011
- Update to version 8.20

* too many fixes to list here, see included ChangeLog

* replace pcre-visibility patch with the one I submitted to
upstream for inclusion.

Tue Oct 11 14:00:00 2011
- udpate to 8.13:

* too many fixes to list here, see included ChangeLog

* the Unicode data tables have been updated to Unicode 6.0.0.

Mon Sep 19 14:00:00 2011
- remove fragile _service

Wed Mar 9 13:00:00 2011
- Update to version 8.12

* This release fixes some bugs in pcregrep, one of which caused the tests to fail
on 64-bit big-endian systems. There are no changes to the code of the library.
- Update to version 8.11

* A number of bugs in the library and in pcregrep have been fixed. As always, see
ChangeLog for details. The following are the non-bug-fix changes:
Added --match-limit and --recursion-limit to pcregrep.
Added an optional parentheses number to the -o and --only-matching options
of pcregrep.
Changed the way PCRE_PARTIAL_HARD affects the matching of $, \\z, \\Z, \\b, and
Added PCRE_ERROR_SHORTUTF8 to make it possible to distinguish between a
bad UTF-8 sequence and one that is incomplete when using PCRE_PARTIAL_HARD.
Recognize (
*NO_START_OPT) at the start of a pattern to set the PCRE_NO_
START_OPTIMIZE option, which is now allowed at compile time

Sat Oct 30 14:00:00 2010
- Support GCC visibility, symbol clashes no more.

Sun Sep 19 14:00:00 2010
- Update to version 8.10:
+ Major additions:
- support for (
*MARK) and friends
- PCRE_UCP option, which changes the behaviour of \\b, \\d, \\s,
and \\w (and their opposites) so that they make use of Unicode
+ Other additions:
- support for \\N, which always matches any character other than
- added --line-buffered to pcregrep
+ Several small new features and bugfixes
- Changes from version 8.02:
+ Update Unicode data tables to Unicode 5.2.0
+ Update the licensing terms in the pcregexp.pas file
+ Several bug fixes
- Changes from version 8.01:
+ Several bug fixes and build system improvements
- Changes from version 8.00:
+ Enhancements:
- remove restrictions on patterns used for partial matching
- give extra information for partial matches
- improve the partial matching process
- add option to make a partial match override a full match
- enhance \"study\" process by finding a lower bound matching
- groups with duplicate numbers may now have duplicated names
without the use of PCRE_DUPNAMES, but they may not have
different names
- add REG_UNGREEDY to the pcreposix interface, which maps to
+ Several bug fixes
- Drop pcre-7.9.patch: fixed upstream.
- Rearrange spec file to have all the %files sections together, as
well as all the scriptlets together.
- Kill the main package that only included doc files like AUTHORS,
NEWS, and license, and put those files in libpcre0: this really
makes more sense. Therefore, make libpcre0 Provides/Obsoletes
- We can also remove the other dependencies on the main package,
since everything already depends on libpcre0.
- Remove AutoReqProv: it\'s default now.
- Remove references to perl 5.005 in descriptons: it\'s not
mentioned anywhere anymore upstream.

Mon Jun 28 14:00:00 2010
- use %_smp_mflags

Sat Apr 24 14:00:00 2010
- buildrequire pkg-config to fix provides

Thu Feb 25 13:00:00 2010
- build noarch docs only for >= 11.2

Wed Feb 10 13:00:00 2010
- fixed license statement according to the conversation
and permissions granted in (bnc #578724)

Sat Dec 12 13:00:00 2009
- add baselibs.conf as a source
- package documentation as noarch

Wed Oct 7 14:00:00 2009
- add obsolete/provides for pcre-32bit (bnc#539543)

Wed Jun 10 14:00:00 2009
- split package into tools, docs and libraries

Fri Jun 5 14:00:00 2009
- disable static libraries, shouldn\'t be used now

Sat May 30 14:00:00 2009
- fix symlinks to libpcre and libpcreposix to fix the build

Wed May 27 14:00:00 2009
- moved libpcre and libpcreposix to %{_lib} (bnc #507449)

Tue May 5 14:00:00 2009
- Release 7.9 11-Apr-09 (bnc #500734)
Mostly bugfixes and tidies with just a couple of minor
functional additions.