An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt.
Created gettext tracking bugs for this issue:
Affects: fedora-all [bug 1647044]
Created mingw-gettext tracking bugs for this issue:
Affects: epel-7 [bug 1647045]
Affects: fedora-all [bug 1647047]
This issue affects the versions of gettext as shipped with Red Hat Enterprise Linux 7.
This issue did not affect the versions of gettext as shipped with Red Hat Enterprise Linux 5 and 6.
This issue has been addressed in the following products:
Red Hat Enterprise Linux 8
Via RHSA-2019:3643 https://access.redhat.com/errata/RHSA-2019:3643
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):