{"affected":[{"ecosystem_specific":{"binaries":[{"liblouis-data":"3.3.0-4.5.1","liblouis-devel":"3.3.0-4.5.1","liblouis14":"3.3.0-4.5.1","python3-louis":"3.3.0-4.5.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","name":"liblouis","purl":"purl:rpm/suse/liblouis&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.3.0-4.5.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for liblouis fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-17294: Fixed an out of bounds read in matchCurrentInput function \n  which could allow a remote attacker to cause Denail of Service (bsc#1109319).\n- CVE-2018-11410: Fixed an invalid free in the compileRule function in\n  compileTranslationTable.c (bsc#1094685)\n- CVE-2018-11440: Fixed a stack-based buffer overflow in the function\n  parseChars() in compileTranslationTable.c (bsc#1095189)\n- CVE-2018-11577: Fixed a segmentation fault in lou_logPrint in logging.c\n  (bsc#1095945)\n- CVE-2018-11683: Fixed a stack-based buffer overflow in the function\n  parseChars() in compileTranslationTable.c (different vulnerability than\n  CVE-2018-11440) (bsc#1095827)\n- CVE-2018-11684: Fixed stack-based buffer overflow in the function\n  includeFile() in compileTranslationTable.c (bsc#1095826)\n- CVE-2018-11685: Fixed a stack-based buffer overflow in the function\n  compileHyphenation() in compileTranslationTable.c (bsc#1095825)\n- CVE-2018-12085: Fixed a stack-based buffer overflow in the function\n  parseChars() in compileTranslationTable.c (different vulnerability than\n  CVE-2018-11440) (bsc#1097103)\n","id":"SUSE-SU-2019:0795-1","modified":"2019-03-28T12:22:17Z","published":"2019-03-28T12:22:17Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190795-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1094685"},{"type":"REPORT","url":"https://bugzilla.suse.com/1095189"},{"type":"REPORT","url":"https://bugzilla.suse.com/1095825"},{"type":"REPORT","url":"https://bugzilla.suse.com/1095826"},{"type":"REPORT","url":"https://bugzilla.suse.com/1095827"},{"type":"REPORT","url":"https://bugzilla.suse.com/1095945"},{"type":"REPORT","url":"https://bugzilla.suse.com/1097103"},{"type":"REPORT","url":"https://bugzilla.suse.com/1109319"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-11410"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-11440"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-11577"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-11683"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-11684"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-11685"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-12085"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-17294"}],"related":["CVE-2018-11410","CVE-2018-11440","CVE-2018-11577","CVE-2018-11683","CVE-2018-11684","CVE-2018-11685","CVE-2018-12085","CVE-2018-17294"],"summary":"Security update for liblouis"}