{"affected":[{"ecosystem_specific":{"binaries":[{"liblouis-data":"3.20.0-150400.3.3.1","liblouis-devel":"3.20.0-150400.3.3.1","liblouis20":"3.20.0-150400.3.3.1","python3-louis":"3.20.0-150400.3.3.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","name":"liblouis","purl":"purl:rpm/suse/liblouis&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.20.0-150400.3.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"liblouis-data":"3.20.0-150400.3.3.1","liblouis-devel":"3.20.0-150400.3.3.1","liblouis-doc":"3.20.0-150400.3.3.1","liblouis-tools":"3.20.0-150400.3.3.1","liblouis20":"3.20.0-150400.3.3.1","python3-louis":"3.20.0-150400.3.3.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.4","name":"liblouis","purl":"purl:rpm/suse/liblouis&distro=openSUSE%20Leap%2015.4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.20.0-150400.3.3.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for liblouis fixes the following issues:\n\n- CVE-2022-26981: fix buffer overrun in compilePassOpcode (bsc#1197085).\n- CVE-2022-31783: prevent an invalid memory write in compileRule (bsc#1200120).\n","id":"SUSE-SU-2022:2298-1","modified":"2022-07-06T11:35:57Z","published":"2022-07-06T11:35:57Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222298-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1197085"},{"type":"REPORT","url":"https://bugzilla.suse.com/1200120"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-26981"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-31783"}],"related":["CVE-2022-26981","CVE-2022-31783"],"summary":"Security update for liblouis"}