CVE-2023-26769

The Liblouis software suite provides an open-source braille translator, back-translator and formatter for a large number of languages and braille codes. It is a set of libraries designed for use in any of a number of applications, both free and commercial. It is written in C so that it does not require a runtime environment and hence can be used in applications written in high-level languages such as Java and Python.

Security Fix(es):

Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.(CVE-2023-26769)

Liblouis is an open source braille translator and back-translator named in honor of Louis Braille. It features support for computer and literary braille, supports contracted and uncontracted translation for many languages and has support for hyphenation. New languages can easily be added through tables that support a rule or dictionary based approach. Liblouis also supports math braille (Nemeth and Marburg).

Security Fix(es):

• liblouis: buffer overflow in lou_logFile function at logginc.c (CVE-2023-26767)

• liblouis: buffer overflow in lou_setDataPath (CVE-2023-26768)

• liblouis: buffer overflow in Lou_Trace (CVE-2023-26769)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.

Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.

Liblouis is an open source braille translator and back-translator named in honor of Louis Braille. It features support for computer and literary braille, supports contracted and uncontracted translation for many languages and has support for hyphenation. New languages can easily be added through tables that support a rule or dictionary based approach. Liblouis also supports math braille (Nemeth and Marburg).

Security Fix(es):

• liblouis: buffer overflow in lou_logFile function at logginc.c (CVE-2023-26767)
• liblouis: buffer overflow in lou_setDataPath (CVE-2023-26768)
• liblouis: buffer overflow in Lou_Trace (CVE-2023-26769)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.

These are all security issues fixed in the liblouis-data-3.25.0-2.1 package on the GA media of openSUSE Tumbleweed.

This update for liblouis fixes the following issues:

• CVE-2023-26767: Fixed buffer overflow vulnerability in lou_logFile function (bsc#1209429).
• CVE-2023-26769: Fixed buffer Overflow vulnerability in resolveSubtable function (bsc#1209432).

This update for liblouis fixes the following issues:

• CVE-2023-26767: Fixed buffer overflow vulnerability in lou_logFile function (bsc#1209429).
• CVE-2023-26769: Fixed buffer Overflow vulnerability in resolveSubtable function (bsc#1209432).

This update for liblouis fixes the following issues:

• CVE-2023-26767: Fixed buffer overflow vulnerability in lou_logFile function (bsc#1209429).
• CVE-2023-26769: Fixed buffer Overflow vulnerability in resolveSubtable function (bsc#1209432).

This update for liblouis fixes the following issues:

• CVE-2023-26767: Fixed buffer overflow vulnerability in lou_logFile function (bsc#1209429).
• CVE-2023-26768: Fixed buffer overflow in lou_logFile() (bsc#1209431).
• CVE-2023-26769: Fixed buffer Overflow vulnerability in resolveSubtable function (bsc#1209432).

It was discovered that Liblouis incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-26767, CVE-2023-26768, CVE-2023-26769)