Update pcre2 to v10.40 to address CVE-2022-1586, CVE-2022-1587 (#3067)

* Address pcre2 critical cves

* undo unneeded setup macro change

SPECS/pcre2/pcre2.signatures.json

@@ -1,5 +1,5 @@
 {
  "Signatures": {
-  "pcre2-10.39.tar.bz2": "0f03caf57f81d9ff362ac28cd389c055ec2bf0678d277349a1a4bee00ad6d440"
+  "pcre2-10.40.tar.bz2": "14e4b83c4783933dc17e964318e6324f7cae1bc75d8f3c79bc6969f00c159d68"
  }
 }

SPECS/pcre2/pcre2.spec

@@ -1,6 +1,6 @@
 Summary:        A library for Perl-compatible regular expressions
 Name:           pcre2
-Version:        10.39
+Version:        10.40
 Release:        1%{?dist}
 License:        BSD
 Vendor:         Microsoft Corporation
@@ -238,6 +238,9 @@ make check -j1
 %{_libdir}/*.a
 
 %changelog
+* Thu May 26 2022 Cameron Baird <[email protected]> - 10.40-1
+- Upgrading to v10.40 to address CVE-2022-1586, CVE-2022-1587
+
 * Tue Feb 15 2022 Max Brodeur-Urbas <[email protected]> - 10.39-1
 - Upgrading to v10.39
 - Fixing source URL. 

cgmanifest.json

@@ -13904,8 +13904,8 @@
         "type": "other",
         "other": {
           "name": "pcre2",
-          "version": "10.39",
-          "downloadUrl": "https://github.com/PhilipHazel/pcre2/releases/download/pcre2-10.39/pcre2-10.39.tar.bz2"
+          "version": "10.40",
+          "downloadUrl": "https://github.com/PhilipHazel/pcre2/releases/download/pcre2-10.40/pcre2-10.40.tar.bz2"
         }
       }
     },