CVE-2019-19917
Fixed in a distro release EPSS 2%
Lout 3.40 has a buffer overflow in the StringQuotedWord() function in z39.c.
Products: lout_project lout, opensuse backports_sle, opensuse leap, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | lout | 3.41-1 |
| SUSE Package Hub 15 SP1 | lout | 3.40-bp151.2.3.1 |
| SUSE Package Hub 15 SP2 | lout | 3.40-bp152.4.3.1 |
| Ubuntu 16.04 LTS | lout | no fix |
| Ubuntu 18.04 LTS | lout | no fix |
| Ubuntu 20.04 LTS | lout | no fix |
| openSUSE Leap 15.1 | lout | 3.40-lp151.2.3.1 |
| openSUSE Leap 15.2 | lout | 3.40-lp152.3.3.1 |
| openSUSE Tumbleweed | lout | 3.42-1.3 |