Red Hat Security AdvisoryRHSA-2017:3384
liblouis security update
Released 2017-12-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) liblouis-2.5.2-12.el7_4, liblouis-python-2.5.2-12.el7_4
- Red Hat Enterprise Linux Client Optional (v. 7) liblouis-devel-2.5.2-12.el7_4, liblouis-doc-2.5.2-12.el7_4, liblouis-utils-2.5.2-12.el7_4
- Red Hat Enterprise Linux Server (v. 7) liblouis-2.5.2-12.el7_4, liblouis-2.5.2-12.el7_4.ppc, liblouis-python-2.5.2-12.el7_4
- Red Hat Enterprise Linux Server Optional (v. 7) liblouis-devel-2.5.2-12.el7_4, liblouis-devel-2.5.2-12.el7_4.ppc, liblouis-doc-2.5.2-12.el7_4 +1
- Red Hat Enterprise Linux Workstation (v. 7) liblouis-2.5.2-12.el7_4, liblouis-python-2.5.2-12.el7_4
- Red Hat Enterprise Linux Workstation Optional (v. 7) liblouis-devel-2.5.2-12.el7_4, liblouis-doc-2.5.2-12.el7_4, liblouis-utils-2.5.2-12.el7_4
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) liblouis-2.5.2-12.el7_4, liblouis-python-2.5.2-12.el7_4
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) liblouis-devel-2.5.2-12.el7_4, liblouis-doc-2.5.2-12.el7_4, liblouis-utils-2.5.2-12.el7_4
Fixes 1 record
Priority MEDIUM 45
A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01517 · Published 2018-07-27 · Fixed CWE-121