liblouis - Debian Package Tracker

general

source: liblouis (main)
version: 3.21.0-1
maintainer: Debian Accessibility Team (archive) (DMD)
uploaders: Cyril Brulebois [DMD] – Samuel Thibault [DMD]
arch: all any
std-ver: 4.6.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 3.0.0-3+deb9u4
o-o-bpo: 3.8.0-2~bpo9+1
oldstable: 3.8.0-2
old-bpo: 3.16.0-1~bpo10+1
stable: 3.16.0-1
stable-bpo: 3.21.0-1~bpo11+1
testing: 3.21.0-1
unstable: 3.21.0-1

versioned links

3.0.0-3+deb9u4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.8.0-2~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.8.0-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.16.0-1~bpo10+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.16.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.21.0-1~bpo11+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.21.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

liblouis-bin
liblouis-data
liblouis-dev
liblouis20
python3-louis

action needed

3 security issues in stretch high

There are 3 open security issues in stretch.

2 important issues:

CVE-2022-26981: Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c (called, indirectly, by tools/lou_checktable.c).
CVE-2022-31783:

1 issue postponed or untriaged:

CVE-2018-17294: (needs triaging) The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing attackers to cause a denial of service (application crash via out-of-bounds read) by crafting an input file with certain translation dictionaries.

Created: 2022-03-13 Last update: 2022-05-29 09:35

2 security issues in sid high

There are 2 open security issues in sid.

2 important issues:

CVE-2022-26981: Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c (called, indirectly, by tools/lou_checktable.c).
CVE-2022-31783:

Created: 2022-03-13 Last update: 2022-05-29 09:35

2 security issues in bookworm high

There are 2 open security issues in bookworm.

2 important issues:

CVE-2022-26981: Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c (called, indirectly, by tools/lou_checktable.c).
CVE-2022-31783:

Created: 2022-03-13 Last update: 2022-05-29 09:35

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 3.21.0-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit e44bf51f55f9b2bf3ee96ee9ea4eb23ac1f54be3
Author: Samuel Thibault <samuel.thibault@ens-lyon.org>
Date:   Fri May 27 00:54:49 2022 +0200

    Enable diffoscope in reprotest CI

commit 35f22e1dc8800688756d636cb6d57b75e9768ded
Merge: 559f091 459f532
Author: Samuel Thibault <samuel.thibault@ens-lyon.org>
Date:   Tue Mar 8 14:56:56 2022 +0000

    Merge branch 'scrub-obsolete' into 'master'
    
    Remove unnecessary constraints
    
    See merge request a11y-team/liblouis!4

commit 459f5320cb36233b861550c16e43e8bc7092b048
Author: root <root@bf0aeeb6f301>
Date:   Tue Mar 8 00:31:25 2022 +0000

    Remove constraints unnecessary since buster
    
    * Build-Depends: Drop versioned constraint on automake and dpkg-dev.
    
    Changes-By: deb-scrub-obsolete

Created: 2022-03-08 Last update: 2022-05-26 23:41

2 low-priority security issues in buster low

There are 2 open security issues in buster.

2 issues left for the package maintainer to handle:

CVE-2022-26981: (needs triaging) Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c (called, indirectly, by tools/lou_checktable.c).
CVE-2022-31783: (needs triaging)

You can find information about how to handle these issues in the security team's documentation.

Created: 2022-03-13 Last update: 2022-05-29 09:35

2 low-priority security issues in bullseye low

There are 2 open security issues in bullseye.

2 issues left for the package maintainer to handle:

CVE-2022-26981: (needs triaging) Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c (called, indirectly, by tools/lou_checktable.c).
CVE-2022-31783: (needs triaging)

You can find information about how to handle these issues in the security team's documentation.

Created: 2022-03-13 Last update: 2022-05-29 09:35

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.6.1 instead of 4.6.0).

Created: 2022-05-11 Last update: 2022-05-11 23:24

news

[rss feed]

[2022-03-15] Accepted liblouis 3.21.0-1~bpo10+1 (source) into oldstable-backports-sloppy->backports-policy, oldstable-backports-sloppy (Debian FTP Masters) (signed by: Samuel Thibault)
[2022-03-10] Accepted liblouis 3.21.0-1~bpo11+1 (source) into bullseye-backports (Samuel Thibault)
[2022-03-10] liblouis 3.21.0-1 MIGRATED to testing (Debian testing watch)
[2022-03-07] Accepted liblouis 3.21.0-1 (source) into unstable (Samuel Thibault)
[2022-02-16] Accepted liblouis 3.20.0-2~bpo10+1 (source) into oldstable-backports-sloppy->backports-policy, oldstable-backports-sloppy (Debian FTP Masters) (signed by: Samuel Thibault)
[2022-02-13] Accepted liblouis 3.20.0-2~bpo11+1 (source) into bullseye-backports (Samuel Thibault)
[2022-02-13] liblouis 3.20.0-2 MIGRATED to testing (Debian testing watch)
[2022-02-10] Accepted liblouis 3.20.0-2 (source) into unstable (Samuel Thibault)
[2021-12-06] Accepted liblouis 3.20.0-1 (source) into unstable (Samuel Thibault)
[2021-10-28] liblouis 3.19.0-2 MIGRATED to testing (Debian testing watch)
[2021-10-25] Accepted liblouis 3.19.0-2 (source) into unstable (Samuel Thibault)
[2021-09-10] Accepted liblouis 3.19.0-1~bpo10+1 (source amd64 all) into oldstable-backports-sloppy->backports-policy, oldstable-backports-sloppy (Debian FTP Masters) (signed by: Samuel Thibault)
[2021-09-09] Accepted liblouis 3.19.0-1~bpo11+1 (source amd64 all) into bullseye-backports (Samuel Thibault)
[2021-09-09] liblouis 3.19.0-1 MIGRATED to testing (Debian testing watch)
[2021-09-06] Accepted liblouis 3.19.0-1 (source) into unstable (Samuel Thibault)
[2021-09-02] Accepted liblouis 3.18.0-2~bpo10+1 (source amd64 all) into oldstable-backports-sloppy->backports-policy, oldstable-backports-sloppy (Debian FTP Masters) (signed by: Samuel Thibault)
[2021-08-24] Accepted liblouis 3.18.0-2~bpo11+1 (source amd64 all) into bullseye-backports, bullseye-backports (Debian FTP Masters) (signed by: Samuel Thibault)
[2021-08-19] liblouis 3.18.0-2 MIGRATED to testing (Debian testing watch)
[2021-08-15] Accepted liblouis 3.18.0-2 (source) into unstable (Samuel Thibault)
[2021-06-07] Accepted liblouis 3.18.0-1 (source) into experimental (Samuel Thibault)
[2021-03-10] Accepted liblouis 3.17.0-1 (source) into experimental (Samuel Thibault)
[2020-12-03] Accepted liblouis 3.16.0-1~bpo10+1 (source) into buster-backports (Samuel Thibault)
[2020-12-03] liblouis 3.16.0-1 MIGRATED to testing (Debian testing watch)
[2020-11-30] Accepted liblouis 3.16.0-1 (source) into unstable (Samuel Thibault)
[2020-09-05] Accepted liblouis 3.15.0-1~bpo10+1 (source) into buster-backports (Samuel Thibault)
[2020-09-03] liblouis 3.15.0-1 MIGRATED to testing (Debian testing watch)
[2020-08-31] Accepted liblouis 3.15.0-1 (source) into unstable (Samuel Thibault)
[2020-06-05] Accepted liblouis 3.14.0-1~bpo10+1 (source) into buster-backports (Samuel Thibault)
[2020-06-05] liblouis 3.14.0-1 MIGRATED to testing (Debian testing watch)
[2020-06-02] Accepted liblouis 3.14.0-1 (source) into unstable (Samuel Thibault)

bugs [bug history graph]

all: 2
RC: 0
I&N: 2
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, clang, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.21.0-1
9 bugs