Bug 918579 (CVE-2022-41409)

Summary:	<dev-libs/libpcre2-10.41: pcre2test DoS
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	minor	CC:	base-system
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/PCRE2Project/pcre2/issues/141
Whiteboard:	C3 [noglsa]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2023-11-25 23:05:30 UTC

CVE-2022-41409:

Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.

Patch in 10.41: https://github.com/PCRE2Project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35

noglsa as this is only a DoS in pcre2test, not in the library itself.