Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by lou_trace.
{
"binaries": [
{
"binary_name": "liblouis-bin",
"binary_version": "3.5.0-1ubuntu0.4"
},
{
"binary_name": "liblouis-data",
"binary_version": "3.5.0-1ubuntu0.4"
},
{
"binary_name": "liblouis-dev",
"binary_version": "3.5.0-1ubuntu0.4"
},
{
"binary_name": "liblouis14",
"binary_version": "3.5.0-1ubuntu0.4"
},
{
"binary_name": "python-louis",
"binary_version": "3.5.0-1ubuntu0.4"
},
{
"binary_name": "python3-louis",
"binary_version": "3.5.0-1ubuntu0.4"
}
],
"availability": "No subscription required"
}
{
"binaries": [
{
"binary_name": "liblouis-bin",
"binary_version": "3.12.0-3ubuntu0.1"
},
{
"binary_name": "liblouis-data",
"binary_version": "3.12.0-3ubuntu0.1"
},
{
"binary_name": "liblouis-dev",
"binary_version": "3.12.0-3ubuntu0.1"
},
{
"binary_name": "liblouis20",
"binary_version": "3.12.0-3ubuntu0.1"
},
{
"binary_name": "python3-louis",
"binary_version": "3.12.0-3ubuntu0.1"
}
],
"availability": "No subscription required"
}
{
"binaries": [
{
"binary_name": "liblouis-bin",
"binary_version": "3.20.0-2ubuntu0.1"
},
{
"binary_name": "liblouis-data",
"binary_version": "3.20.0-2ubuntu0.1"
},
{
"binary_name": "liblouis-dev",
"binary_version": "3.20.0-2ubuntu0.1"
},
{
"binary_name": "liblouis20",
"binary_version": "3.20.0-2ubuntu0.1"
},
{
"binary_name": "python3-louis",
"binary_version": "3.20.0-2ubuntu0.1"
}
],
"availability": "No subscription required"
}