---

AVG-1860 - log back

AVG-1860 edited at 17 May 2021 07:50:25
Advisory qualified	- Yes + No

AVG-1860 edited at 03 May 2021 08:44:48
Status	- Vulnerable + Fixed
Affected	- 1.7.1-1 + 1.7.0-1
Fixed	+ 1.7.1-2
Notes	- The Arch Linux package version 1.7.1-1 is actually still upstream version 1.7.0 because only $pkgver, but not the commit hash was bumped by accident. + The Arch Linux package vault 1.7.1-1 was actually still upstream version 1.7.0 because only $pkgver, but not the commit hash was bumped by accident. This is fixed in version 1.7.1-2 of the Arch Linux package.

AVG-1860 edited at 03 May 2021 07:42:43
Affected	- 1.7.0-1 + 1.7.1-1
Notes	+ The Arch Linux package version 1.7.1-1 is actually still upstream version 1.7.0 because only $pkgver, but not the commit hash was bumped by accident.

AVG-1860 edited at 22 Apr 2021 18:13:41
Severity	- Unknown + Medium

AVG-1860 created at 22 Apr 2021 18:11:44
Packages	+ vault
Issues	+ CVE-2021-27400 + CVE-2021-29653
Status	+ Vulnerable
Severity	+ Unknown
Affected	+ 1.7.0-1
Fixed
Ticket
Advisory qualified	+ Yes
References
Notes