Opened 17 years ago
Closed 17 years ago
#2435 closed task (fixed)
PCRE-7.6
Reported by: | Randy McMurchy | Owned by: | |
---|---|---|---|
Priority: | high | Milestone: | 6.3 |
Component: | BOOK | Version: | SVN |
Severity: | major | Keywords: | pcre |
Cc: |
Description ¶
Version increment to 7.4
Change History (5)
comment:1 by , 17 years ago
Summary: | PCRE-7.4 → PCRE-7.6 |
---|
comment:2 by , 17 years ago
Please check this bug (1) first before updating.
Working patch also in comment 3.
comment:3 by , 17 years ago
Glib can use the system pcre instead of its internal pcre. But in order to do that it needs both unicode related switches to be enabled during pcre configuration/installation:
--enable-utf8 --enable-unicode-properties
Another important thing to mention is that its possible for pcregrep to read compressed files (.gz and .bz2) by using zlib and bz2 libraries (both are present in a base LFS system therefore there is no need for additional dependencies).
To add this kind of support two configure switches needed:
--enable-pcregrep-libz --enable-pcregrep-libbz2
Another Note: Pcre now can be built using Cmake.
And a last one. Pcre versions prior to 7.6 are vulnerable because of a buffer overflow problem when run in UTF-8 mode.
Many distributions using the pcre library (glib, zsh, and Python at least). Of all of these three, glib and Python needed to upgraded to newer versions because of the vulnerability, and that's because both of them are using an internal (old) pcre.
comment:4 by , 17 years ago
Priority: | normal → high |
---|---|
Severity: | normal → major |
Patch submitted. I also raised up severity/priority. I can update the package if I have another opinion about the switches than need to added as default or as optional.
My opinion is to enable all of them by default, since they add value to the end result and costs nothing.
comment:5 by , 17 years ago
Keywords: | pcre added |
---|---|
Resolution: | → fixed |
Status: | new → closed |
Fixed in r7208.
Version increment to 7.6