Medium ELSA-2020-1708 4 CVEs

Moderate: liblouis security and bug fix update (Oracle Linux 8)

Published May 5, 2020 · Updated May 5, 2020

Ecosystem: Oracle Linux

Summary

[2.6.2-21]
- A further Coverity fix (#1602585)

[2.6.2-20]
- Fix buffer overruns found by Coverity (#1602585)

[2.6.2-19]
- Fix two issues found by Coverity (#1602585)

[2.6.2-18]
- Apply patch for CVE-2018-12085 (#1589942)

[2.6.2-17]
- Fix CVE-2018-11577 (#1585906)
- Fix CVE-2018-11684 (#1588632)
- Fix CVE-2018-11685 (#1588637)
- Fix CVE-2018-12085 (#1589942)

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	liblouis	0:2.6.2-21.el8
Oracle Linux · 8	python3-louis	0:2.6.2-21.el8

Vulnerabilities 4

Unscored —

CVE-2018-11577

Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c.

liblouis liblouis Debian Ubuntu

May 31, 2018
Unscored —

CVE-2018-11684

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.

liblouis liblouis Debian Ubuntu

Jun 4, 2018
Unscored —

CVE-2018-11685

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.

liblouis liblouis Debian Ubuntu

Jun 4, 2018
Unscored —

CVE-2018-12085

Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different v…

liblouis liblouis Debian Ubuntu

Jun 9, 2018