Re: Liblouis CVE's in stretch
Samuel Thibault, le lun. 30 mai 2022 14:34:08 +0200, a ecrit:
> Andreas Rönnquist, le lun. 30 mai 2022 13:10:37 +0200, a ecrit:
> > Also - I am looking at fixing CVE-2018-17294 [3],
>
> This one however is about input indeed. Perhaps it'd be worth checking
> against the latest upstream master branch of liblouis, since there have
> been various fixes there recently.
Ah, the report says it's fixed since 3.7.
Stretch is really really old (oldoldstable, replaced by buster in 2019
then bullseye in 2021) and its LTS ends at the end of june, I don't
think it's worth spending time on it.
Samuel
Reply to: