| Package | Affected versions | Patched versions |
|---|---|---|
| gettext | = 0.19.8 |
An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free