{"affected":[{"ecosystem_specific":{"binaries":[{"lout":"3.40-lp151.2.3.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.1","name":"lout","purl":"purl:rpm/suse/lout&distro=openSUSE%20Leap%2015.1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.40-lp151.2.3.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for lout fixes the following issues:\n\n- CVE-2019-19918: Fixed buffer overflow in srcnext() (boo#1159713).\n- CVE-2019-19917: Fixed buffer overflow in StringQuotedWord() (boo#1159714).\n","id":"openSUSE-SU-2020:1772-1","modified":"2020-10-29T17:24:34Z","published":"2020-10-29T17:24:34Z","references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EWXJT3BMRCLBWRM6J4ZUXWRV3NAA3B27/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1159713"},{"type":"REPORT","url":"https://bugzilla.suse.com/1159714"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-19917"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-19918"}],"related":["CVE-2019-19917","CVE-2019-19918"],"summary":"Security update for lout"}