Browse code

pcre: Fix for CVE-2017-11164

Adding stack recursion limit.

Change-Id: I777563f8bd72acc4c398b5f9874ee6d7c30bc13d
Reviewed-on: http://photon-jenkins.eng.vmware.com:8082/5446
Tested-by: gerrit-photon <photon-checkins@vmware.com>
Reviewed-by: Sharath George

Keerthana K authored on 2018/08/02 02:02:06
Showing 1 changed files
... ...
@@ -1,7 +1,7 @@
1 1
 Summary:        Grep for perl compatible regular expressions
2 2
 Name:           pcre
3 3
 Version:        8.41
4
-Release:        1%{?dist}
4
+Release:        2%{?dist}
5 5
 License:        BSD
6 6
 URL:            ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.41.tar.bz2
7 7
 Group:          Applications/System
... ...
@@ -36,6 +36,7 @@ library.
36 36
             --enable-pcregrep-libz            \
37 37
             --enable-pcregrep-libbz2          \
38 38
             --enable-pcretest-libreadline     \
39
+            --with-match-limit-recursion=16000 \
39 40
             --disable-static
40 41
 make %{?_smp_mflags}
41 42
 %install
... ...
@@ -65,6 +66,8 @@ ln -sfv $(readlink %{buildroot}/usr/lib/libpcre.so) %{buildroot}/usr/lib/libpcre
65 65
 %{_libdir}/pkgconfig/*.pc
66 66
 %{_includedir}/*
67 67
 %changelog
68
+*   Wed Aug 1 2018 Keerthana K <keerthanak@vmware.com> 8.41-2
69
+-   Fix for CVE-2017-11164 by adding stack recursion limit.
68 70
 *   Wed Dec 20 2017 Xiaolin Li <xiaolinl@vmware.com> 8.41-1
69 71
 -   Update to version 8.41
70 72
 *   Fri Sep 09 2016 Xiaolin Li <xiaolinl@vmware.com> 8.39-1