AVG-205 - log back

AVG-205 created at 25 Sep 2019 19:31:50
Packages
+ audiofile
Issues
+ CVE-2017-6827
+ CVE-2017-6828
+ CVE-2017-6829
+ CVE-2017-6830
+ CVE-2017-6831
+ CVE-2017-6832
+ CVE-2017-6833
+ CVE-2017-6834
+ CVE-2017-6835
+ CVE-2017-6836
+ CVE-2017-6837
+ CVE-2017-6838
+ CVE-2017-6839
Status
+ Fixed
Severity
+ High
Affected
+ 0.3.6-3
Fixed
+ 0.3.6-4
Ticket
Advisory qualified
+ Yes
References
+ https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-msadpcminitializecoefficients-msadpcm-cpp/
+ https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-readvalue-filehandle-cpp/
+ https://blogs.gentoo.org/ago/2017/02/20/audiofile-global-buffer-overflow-in-decodesample-ima-cpp/
+ https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-alaw2linear_buf-g711-cpp/
+ https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-imadecodeblockwave-ima-cpp/
+ https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-msadpcmdecodeblock-msadpcm-cpp/
+ https://blogs.gentoo.org/ago/2017/02/20/audiofile-divide-by-zero-in-blockcodecrunpull-blockcodec-cpp/
+ https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-ulaw2linear_buf-g711-cpp/
+ https://blogs.gentoo.org/ago/2017/02/20/audiofile-divide-by-zero-in-blockcodecreset1-blockcodec-cpp/
+ https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-expand3to4modulerun-simplemodule-h/
+ https://blogs.gentoo.org/ago/2017/02/20/audiofile-multiple-ubsan-crashes/
Notes