Skip to content
OpenAdvisories
Medium ALAS2-2020-1524 4 CVEs

Moderate: geronimo-jaxrpc security update (Amazon Linux 2)

Published Oct 22, 2020 · Updated Oct 22, 2020

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-12085: Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440. 1589940: CVE-2018-12085 liblouis: Stack-based buffer overflow in compileTranslationTable.c CVE-2018-11685: Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c. 1588636: CVE-2018-11685 liblouis: Stack-based buffer overflow in function compileHyphenation in compileTranslationTable.c CVE-2018-11684: Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c. 1588631: CVE-2018-11684 liblouis: Stack-based buffer overflow in function includeFile in compileTranslationTable.c CVE-2018-11577: Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c. 1585905: CVE-2018-11577 liblouis: Segmentation fault in logging.c:lou_logPrint()

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 geronimo-jaxrpc 0:2.1-14.amzn2
Amazon Linux · 2 geronimo-jaxrpc-javadoc 0:2.1-14.amzn2

Vulnerabilities 4

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-11577.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-11684.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-11685.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-12085.html