Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-12085: Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440. 1589940: CVE-2018-12085 liblouis: Stack-based buffer overflow in compileTranslationTable.c CVE-2018-11685: Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c. 1588636: CVE-2018-11685 liblouis: Stack-based buffer overflow in function compileHyphenation in compileTranslationTable.c CVE-2018-11684: Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c. 1588631: CVE-2018-11684 liblouis: Stack-based buffer overflow in function includeFile in compileTranslationTable.c CVE-2018-11577: Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c. 1585905: CVE-2018-11577 liblouis: Segmentation fault in logging.c:lou_logPrint()
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | geronimo-jaxrpc | 0:2.1-14.amzn2 |
| Amazon Linux · 2 | geronimo-jaxrpc-javadoc | 0:2.1-14.amzn2 |
Vulnerabilities 4
-
Unscored —
Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c.
-
Unscored —
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.
-
Unscored —
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.
-
Unscored —
Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different v…