FEDORA-2020-869cd99560 — security update for lout

stable

lout-3.40-18.fc32

FEDORA-2020-869cd99560 created by mcepl 2 years ago for Fedora 32

Add lout-3.40-cve.patch from https://lists.nongnu.org/archive/html/lout-users/2020-10/msg00013.html fixing #1787383 and #1787386 (CVE-2019-19918 and CVE-2019-19917), two buffer overflows.

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2020-869cd99560

This update has been submitted for testing by mcepl.

2 years ago

This update's test gating status has been changed to 'ignored'.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update's test gating status has been changed to 'ignored'.

2 years ago

This update has been pushed to testing.

2 years ago

This update can be pushed to stable now if the maintainer wishes

2 years ago

This update has been submitted for stable by bodhi.

2 years ago

This update has been pushed to stable.

2 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

lout-3.40-18.fc32

Settings

Unstable by Karma

-1

Stable by Karma

Stable by Time

7 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

BZ#1787384 CVE-2019-19918 lout: heap-based buffer overflow in srcnext in z02.c [fedora-all]

BZ#1787385 CVE-2019-19918 lout: heap-based buffer overflow in srcnext in z02.c [epel-6]

BZ#1787386 CVE-2019-19918 lout: heap-based buffer overflow in srcnext in z02.c [epel-7]

BZ#1787389 CVE-2019-19917 lout: buffer overflow in StringQuotedWord in z39.c [fedora-all]

BZ#1787390 CVE-2019-19917 lout: buffer overflow in StringQuotedWord in z39.c [epel-6]

BZ#1787391 CVE-2019-19917 lout: buffer overflow in StringQuotedWord in z39.c [epel-7]

lout-3.40-18.fc32

Automated Test Results

ignored