Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::client | liblouis | 0:2.5.2-11.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::client | liblouis-debuginfo | 0:2.5.2-11.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::client | liblouis-devel | 0:2.5.2-11.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::client | liblouis-doc | 0:2.5.2-11.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::client | liblouis-python | 0:2.5.2-11.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::client | liblouis-utils | 0:2.5.2-11.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::server | liblouis | 0:2.5.2-11.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::server | liblouis-debuginfo | 0:2.5.2-11.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::server | liblouis-devel | 0:2.5.2-11.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::server | liblouis-doc | 0:2.5.2-11.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::server | liblouis-python | 0:2.5.2-11.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::server | liblouis-utils | 0:2.5.2-11.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | liblouis | 0:2.5.2-11.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | liblouis-debuginfo | 0:2.5.2-11.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | liblouis-devel | 0:2.5.2-11.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | liblouis-doc | 0:2.5.2-11.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | liblouis-python | 0:2.5.2-11.el7_4 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | liblouis-utils | 0:2.5.2-11.el7_4 |
Vulnerabilities 7
-
High 7.8
A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTabl…
-
Unscored —
There is an illegal address access in the _lou_getALine function in compileTranslationTable.c:346 in Liblouis 3.2.0.
-
Unscored —
There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function parseChars() in compileTranslationT…
-
Unscored —
There is a use-after-free in the function compileBrailleIndicator() in compileTranslationTable.c in Liblouis 3.2.0 that…
-
Unscored —
There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile() in compileTranslation…
-
Unscored —
There is a buffer overflow in Liblouis 3.2.0, triggered in the function _lou_showString() in utils.c, that will lead to…
-
Unscored —
There is an illegal address access in the function _lou_getALine() in compileTranslationTable.c:343 in Liblouis 3.2.0.
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1488933
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1488935
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1488937
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1488938
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1488939
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1488942
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1492701
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3111.json
-
report
https://access.redhat.com/security/cve/CVE-2014-8184
-
advisory
https://www.cve.org/CVERecord?id=CVE-2014-8184
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-8184
-
article
https://github.com/liblouis/liblouis/issues/425
-
report
https://access.redhat.com/security/cve/CVE-2017-13738
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-13738
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-13738
-
report
https://access.redhat.com/security/cve/CVE-2017-13740
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-13740
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-13740
-
report
https://access.redhat.com/security/cve/CVE-2017-13741
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-13741
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-13741
-
report
https://access.redhat.com/security/cve/CVE-2017-13742
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-13742
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-13742
-
report
https://access.redhat.com/security/cve/CVE-2017-13743
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-13743
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-13743
-
report
https://access.redhat.com/security/cve/CVE-2017-13744
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-13744
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-13744