AVG-222 - log back

AVG-222 created at 25 Sep 2019 19:31:50
Packages
+ pcre
Issues
+ CVE-2017-7186
+ CVE-2017-7244
+ CVE-2017-7245
+ CVE-2017-7246
Status
+ Fixed
Severity
+ Medium
Affected
+ 8.40-1
Fixed
+ 8.41-1
Ticket
Advisory qualified
+ Yes
References
+ https://vcs.pcre.org/pcre/code/trunk/pcre_ucd.c?r1=1490&r2=1688&sortby=date
+ https://blogs.gentoo.org/ago/2017/03/20/libpcre-two-stack-based-buffer-overflow-write-in-pcre32_copy_substring-pcre_get-c/
+ https://blogs.gentoo.org/ago/2017/03/20/libpcre-invalid-memory-read-in-_pcre32_xclass-pcre_xclass-c/
Notes