ALSA-2019:3643 - Low: gettext security update
Summary
ALSA-2019:3643: Low: gettext security update. Affects gettext versions < 0.19.8.1-17.el8. Fixed in 0.19.8.1-17.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The gettext package is used for producing multi-lingual messages in programs. It provides a set of conventions for writing programs, a runtime library, and a directory and file naming organization for message catalogs. The package is widely used in various software applications.
Vulnerability Detail
The vulnerability (CVE-2018-18751) in gettext is a double free issue in the default_add_message function in read-catalog.c. This vulnerability could be exploited by an attacker to cause a denial of service or potentially execute arbitrary code. The impact of this vulnerability is considered low.
How To Fix
Minimum fixed version
0.19.8.1-17.el8
This is the first release that contains the fix.
sudo dnf update gettextTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. Updating to the fixed version is the recommended solution.
Conclusion
In conclusion, the gettext package has a low-severity vulnerability (CVE-2018-18751) that can be fixed by updating to version 0.19.8.1-17.el8 or later. There is no known workaround for this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for gettext →
FAQ
The gettext package is used for producing multi-lingual messages in programs.
The impact of this vulnerability is considered low. It could potentially lead to a denial of service or arbitrary code execution.
To fix this vulnerability, update the gettext package to version 0.19.8.1-17.el8 or later.
There is no known workaround for this vulnerability. Updating to the fixed version is the recommended solution.
You can find more information about this vulnerability in the CVE page: CVE-2018-18751.
References
Related vulnerabilities
Recent vulnerabilities recorded for gettext.
