Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 543
Alerts This Week
Warning Icon 1 543

Ubuntu 18.04 LTS USN-3782-1 Critical: Liblouis Denial Of Service

ubuntu
Calendar Grey October 3, 2018
Dist Ubuntu Esm H88
Critical security issues in liblouis resolved for Ubuntu 18.04 LTS. Refer to USN-3782-1 advisory for details.
Several security issues were fixed in Liblouis.

Summary

Several security issues were fixed in Liblouis.

Software Description:

- liblouis: Braille translation library - utilities

Details:

Henri Salo discovered that Liblouis incorrectly handled certain files.

An attacker could possibly use this issue to execute arbitrary code.

(CVE-2018-12085)

It was discovered that Liblouis incorrectly handled certain files.

An attacker could possibly use this issue to cause a denial of service.

This issue only affected Ubuntu 18.04 LTS. (CVE-2018-17294)

Topics%20covered

Topics Covered

security advisory denial of service critical ubuntu liblouis

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  liblouis-bin                    3.5.0-1ubuntu0.3
  liblouis14                      3.5.0-1ubuntu0.3

Ubuntu 16.04 LTS:
  liblouis-bin                    2.6.4-2ubuntu0.4
  liblouis9                       2.6.4-2ubuntu0.4

Ubuntu 14.04 LTS:
  liblouis-bin                    2.5.3-2ubuntu1.5
  liblouis2                       2.5.3-2ubuntu1.5

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-3782-1

  CVE-2018-12085, CVE-2018-17294

Severity
critical
Lowest
Low
Medium
High
Critical

October 03, 2018

Topics%20covered

Topics Covered

security advisory denial of service critical ubuntu liblouis

Package Information

  https://launchpad.net/ubuntu/+source/liblouis/3.5.0-1ubuntu0.3
  https://launchpad.net/ubuntu/+source/liblouis/2.6.4-2ubuntu0.4
  https://launchpad.net/ubuntu/+source/liblouis/2.5.3-2ubuntu1.5

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.