Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-18751

Fixed in a distro release EPSS 4%

An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt.

Published 2018-10-28 · CVE record · OSV

Products: gnu gettext, canonical ubuntu_linux, redhat enterprise_linux

Distro releases

ReleasePackageFixed in
AlmaLinux 8gettext0.19.8.1-17.el8
AlmaLinux 8gettext-common-devel0.19.8.1-17.el8
AlmaLinux 8gettext-devel0.19.8.1-17.el8
AlmaLinux 8gettext-libs0.19.8.1-17.el8
Alpine 3.11gettext0.20.1-r0
Alpine 3.12gettext0.20.1-r0
Alpine 3.13gettext0.20.1-r0
Alpine 3.14gettext0.20.1-r0
Alpine 3.15gettext0.20.1-r0
Alpine 3.16gettext0.20.1-r0
Alpine 3.17gettext0.20.1-r0
Alpine 3.18gettext0.20.1-r0
Alpine 3.19gettext0.20.1-r0
Alpine 3.20gettext0.20.1-r0
Alpine 3.21gettext0.20.1-r0
Alpine 3.22gettext0.20.1-r0
Alpine 3.23gettext0.20.1-r0
Alpine 3.24gettext0.20.1-r0
Amazon Linux 2emacs-gettext0.19.8.1-3.amzn2
Amazon Linux 2gettext0.19.8.1-3.amzn2
Amazon Linux 2gettext-common-devel0.19.8.1-3.amzn2
Amazon Linux 2gettext-devel0.19.8.1-3.amzn2
Amazon Linux 2gettext-libs0.19.8.1-3.amzn2
Arch Linuxgettext0.20.1-1
Debian 12gettext0.19.8.1-9
Debian 13gettext0.19.8.1-9
Debian 14gettext0.19.8.1-9
Red Hat Enterprise Linux 7emacs-gettext0:0.19.8.1-3.el7
Red Hat Enterprise Linux 7gettext0:0.19.8.1-3.el7
Red Hat Enterprise Linux 7gettext-common-devel0:0.19.8.1-3.el7
Red Hat Enterprise Linux 7gettext-debuginfo0:0.19.8.1-3.el7
Red Hat Enterprise Linux 7gettext-devel0:0.19.8.1-3.el7
Red Hat Enterprise Linux 7gettext-libs0:0.19.8.1-3.el7
Red Hat Enterprise Linux 8gettext0:0.19.8.1-17.el8
Red Hat Enterprise Linux 8gettext-common-devel0:0.19.8.1-17.el8
Red Hat Enterprise Linux 8gettext-debuginfo0:0.19.8.1-17.el8
Red Hat Enterprise Linux 8gettext-debugsource0:0.19.8.1-17.el8
Red Hat Enterprise Linux 8gettext-devel0:0.19.8.1-17.el8
Red Hat Enterprise Linux 8gettext-devel-debuginfo0:0.19.8.1-17.el8
Red Hat Enterprise Linux 8gettext-libs0:0.19.8.1-17.el8
Red Hat Enterprise Linux 8gettext-libs-debuginfo0:0.19.8.1-17.el8
Red Hat rhel eus 7.6emacs-gettext0:0.19.8.1-3.el7_6
Red Hat rhel eus 7.6gettext0:0.19.8.1-3.el7_6
Red Hat rhel eus 7.6gettext-common-devel0:0.19.8.1-3.el7_6
Red Hat rhel eus 7.6gettext-debuginfo0:0.19.8.1-3.el7_6
Red Hat rhel eus 7.6gettext-devel0:0.19.8.1-3.el7_6
Red Hat rhel eus 7.6gettext-libs0:0.19.8.1-3.el7_6
Red Hat rhel eus 7.7emacs-gettext0:0.19.8.1-3.el7_7
Red Hat rhel eus 7.7gettext0:0.19.8.1-3.el7_7
Red Hat rhel eus 7.7gettext-common-devel0:0.19.8.1-3.el7_7
Red Hat rhel eus 7.7gettext-debuginfo0:0.19.8.1-3.el7_7
Red Hat rhel eus 7.7gettext-devel0:0.19.8.1-3.el7_7
Red Hat rhel eus 7.7gettext-libs0:0.19.8.1-3.el7_7
Rocky Linux 8gettext0:0.19.8.1-17.el8
SUSE Linux Enterprise Module for Basesystem 15 SP1gettext-runtime0.19.8.1-4.8.1
SUSE Linux Enterprise Module for Basesystem 15 SP2gettext-runtime0.19.8.1-4.8.1
SUSE Linux Enterprise Server 12 SP5gettext-runtime0.19.2-3.3.6
SUSE Linux Enterprise Server for SAP Applications 12 SP5gettext-runtime0.19.2-3.3.6
SUSE Package Hub 15 SP1gettext-csharp0.19.8.1-bp151.2.1
Ubuntu 14.04 LTSgettext0.18.3.1-1ubuntu3.1
Ubuntu 16.04 LTSgettext0.19.7-2ubuntu3.1
Ubuntu 18.04 LTSgettext0.19.8.1-6ubuntu0.1
openSUSE Leap 15.1gettext-csharp0.19.8.1-lp151.5.3.1
openSUSE Leap 15.1gettext-java0.19.8.1-lp151.5.3.1
openSUSE Leap 15.1gettext-runtime0.19.8.1-lp151.5.3.1
openSUSE Leap 15.1gettext-runtime-mini0.19.8.1-lp151.5.3.1
openSUSE Leap 15.2gettext-csharp0.19.8.1-lp152.6.3.1
openSUSE Leap 15.2gettext-java0.19.8.1-lp152.6.3.1
openSUSE Leap 15.2gettext-runtime0.19.8.1-lp152.6.3.1
openSUSE Leap 15.2gettext-runtime-mini0.19.8.1-lp152.6.3.1