CVS commit: pkgsrc/devel/pcre2

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Fri Aug 29 08:43:16 UTC 2025

Modified Files:
        pkgsrc/devel/pcre2: Makefile distinfo

Log Message:
pcre2: updated to 10.46

Version 10.46 27-August-2025

This is a security-only release, to address CVE-2025-58050.

Compared to 10.45, this release has only a minimal code change to prevent a
read-past-the-end memory error, of arbitrary length. An attacker-controlled
regex pattern is required, and it cannot be triggered by providing crafted
subject (match) text. The (*ACCEPT) and (*scs:) pattern features must be used
together.

Release 10.44 and earlier are not affected.

This could have implications of denial-of-service or information disclosure,
and could potentially be used to escalate other vulnerabilities in a system
(such as information disclosure being used to escalate the severity of an
unrelated bug in another system).


To generate a diff of this commit:
cvs rdiff -u -r1.30 -r1.31 pkgsrc/devel/pcre2/Makefile
cvs rdiff -u -r1.27 -r1.28 pkgsrc/devel/pcre2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/pcre2/Makefile
diff -u pkgsrc/devel/pcre2/Makefile:1.30 pkgsrc/devel/pcre2/Makefile:1.31
--- pkgsrc/devel/pcre2/Makefile:1.30    Wed Feb  5 16:11:51 2025
+++ pkgsrc/devel/pcre2/Makefile Fri Aug 29 08:43:16 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.30 2025/02/05 16:11:51 adam Exp $
+# $NetBSD: Makefile,v 1.31 2025/08/29 08:43:16 adam Exp $
 
-DISTNAME=      pcre2-10.45
+DISTNAME=      pcre2-10.46
 CATEGORIES=    devel
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=PhilipHazel/}
 GITHUB_RELEASE=        ${DISTNAME}

Index: pkgsrc/devel/pcre2/distinfo
diff -u pkgsrc/devel/pcre2/distinfo:1.27 pkgsrc/devel/pcre2/distinfo:1.28
--- pkgsrc/devel/pcre2/distinfo:1.27    Wed Feb  5 16:11:51 2025
+++ pkgsrc/devel/pcre2/distinfo Fri Aug 29 08:43:16 2025
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.27 2025/02/05 16:11:51 adam Exp $
+$NetBSD: distinfo,v 1.28 2025/08/29 08:43:16 adam Exp $
 
-BLAKE2s (pcre2-10.45.tar.gz) = 964e23cd8d075cac1bce4bd54c106ccef9c9717c4ea3a4f1ab8f90703013b9ec
-SHA512 (pcre2-10.45.tar.gz) = 6ec01a05ce65be61e5974dcc2ccd2e2b5c6db183e3a592530205c7d3259b730df3a9ab999d204f3c52e5a14ae88f32f94306b4501eb9629568ce6158985e2fa6
-Size (pcre2-10.45.tar.gz) = 2715958 bytes
+BLAKE2s (pcre2-10.46.tar.gz) = 6ee73f0b3a10844a3548812651d4b2a4b1f06e68dee74b80d1b3741c0e399a21
+SHA512 (pcre2-10.46.tar.gz) = 8bc85f1e47633f4cab07e00b65e9f94a38bb8db56d7ea0a3068774a5ccfe5b777e6645c0a345dd265a06aa6672448ad51c9e56636c48ec87dae9f884a998e00b
+Size (pcre2-10.46.tar.gz) = 2718545 bytes