Skip to content
OpenAdvisories
Medium ALAS2-2024-2471 4 CVEs

Moderate: liblouis security update (Amazon Linux 2)

Published Feb 15, 2024 · Updated Feb 19, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-12085: Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440. CVE-2018-11685: Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c. CVE-2018-11684: Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c. CVE-2018-11577: Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c.

Fixed packages 7

ReleasePackageFixed in
Amazon Linux · 2 liblouis 0:2.6.2-21.amzn2.0.1
Amazon Linux · 2 liblouis-debuginfo 0:2.6.2-21.amzn2.0.1
Amazon Linux · 2 liblouis-devel 0:2.6.2-21.amzn2.0.1
Amazon Linux · 2 liblouis-doc 0:2.6.2-21.amzn2.0.1
Amazon Linux · 2 liblouis-utils 0:2.6.2-21.amzn2.0.1
Amazon Linux · 2 python2-louis 0:2.6.2-21.amzn2.0.1
Amazon Linux · 2 python3-louis 0:2.6.2-21.amzn2.0.1

Vulnerabilities 4

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-11577.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-11684.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-11685.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-12085.html