ALSA-2023:6385

Source
https://errata.almalinux.org/9/ALSA-2023-6385.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2023:6385.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2023:6385
Related
Published
2023-11-07T00:00:00Z
Modified
2023-11-14T12:10:58Z
Summary
Moderate: liblouis security update
Details

Liblouis is an open source braille translator and back-translator named in honor of Louis Braille. It features support for computer and literary braille, supports contracted and uncontracted translation for many languages and has support for hyphenation. New languages can easily be added through tables that support a rule or dictionary based approach. Liblouis also supports math braille (Nemeth and Marburg).

Security Fix(es):

  • liblouis: buffer overflow in lou_logFile function at logginc.c (CVE-2023-26767)
  • liblouis: buffer overflow in lou_setDataPath (CVE-2023-26768)
  • liblouis: buffer overflow in Lou_Trace (CVE-2023-26769)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References

Affected packages

AlmaLinux:9 / liblouis

Package

Name
liblouis

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.16.1-5.el9

AlmaLinux:9 / python3-louis

Package

Name
python3-louis

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.16.1-5.el9