Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 7: MGASA-2020-0411 Critical: Lout Buffer Overflows

mageia
Calendar Grey November 10, 2020
Dist Mageia Esm H88
Mageia 2020-0412 resolves urgent security vulnerabilities found in Gimp 2.10 packages to maintain user protection.
Lout 3.40 has a buffer overflow in the StringQuotedWord() function in z39.c

Summary

Lout 3.40 has a buffer overflow in the StringQuotedWord() function in z39.c. (CVE-2019-19917)
Lout 3.40 has a heap-based buffer overflow in the srcnext() function in z02.c. (CVE-2019-19918)

References

- https://bugs.mageia.org/show_bug.cgi?id=27492

- - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/QGZKTKGRJTQE43SFU77X5QJHKXTTOJYB/

- https://www.cve.org/CVERecord?id=CVE-2019-19917

- https://www.cve.org/CVERecord?id=CVE-2019-19918

Topics%20covered

Topics Covered

security advisory buffer overflow software update vulnerability heap overflow mageia lout

Resolution

SRPMS

- 7/core/lout-3.40-9.1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 10 Nov 2020
URL: https://advisories.mageia.org/MGASA-2020-0411.html
Type: security
CVE: CVE-2019-19917, CVE-2019-19918

Topics%20covered

Topics Covered

security advisory buffer overflow software update vulnerability heap overflow mageia lout

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here