Skip to content
OpenAdvisories
High ALAS2-2023-2013 3 CVEs

Important: liblouis security update (Amazon Linux 2)

Published Apr 13, 2023 · Updated Apr 20, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-26769: Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c. CVE-2023-26768: Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTable.c and lou_setDataPath functions. CVE-2023-26767: Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the lou_logFile function at logginc.c endpoint.

Fixed packages 7

ReleasePackageFixed in
Amazon Linux · 2 liblouis 0:2.6.2-21.amzn2.0.2
Amazon Linux · 2 liblouis-debuginfo 0:2.6.2-21.amzn2.0.2
Amazon Linux · 2 liblouis-devel 0:2.6.2-21.amzn2.0.2
Amazon Linux · 2 liblouis-doc 0:2.6.2-21.amzn2.0.2
Amazon Linux · 2 liblouis-utils 0:2.6.2-21.amzn2.0.2
Amazon Linux · 2 python2-louis 0:2.6.2-21.amzn2.0.2
Amazon Linux · 2 python3-louis 0:2.6.2-21.amzn2.0.2

Vulnerabilities 3

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-26767.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-26768.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-26769.html