Low: libmspack security update (Amazon Linux 2)

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-14682: An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression. 1610941: CVE-2018-14682 libmspack: off-by-one error in the TOLOWER() macro for CHM decompression CVE-2018-14681: An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite. 1610896: CVE-2018-14681 libmspack: out-of-bounds write in kwajd_read_headers in mspack/kwajd.c CVE-2018-14680: An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames. 1610934: CVE-2018-14680 libmspack: off-by-one error in the CHM chunk number validity checks CVE-2018-14679: An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash). 1610890: CVE-2018-14679 libmspack: off-by-one error in the CHM PMGI/PMGL chunk number validity checks