{"id":"openSUSE-SU-2019:1160-1","summary":"Security update for liblouis","details":"This update for liblouis fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-17294: Fixed an out of bounds read in matchCurrentInput function \n  which could allow a remote attacker to cause Denail of Service (bsc#1109319).\n- CVE-2018-11410: Fixed an invalid free in the compileRule function in\n  compileTranslationTable.c (bsc#1094685)\n- CVE-2018-11440: Fixed a stack-based buffer overflow in the function\n  parseChars() in compileTranslationTable.c (bsc#1095189)\n- CVE-2018-11577: Fixed a segmentation fault in lou_logPrint in logging.c\n  (bsc#1095945)\n- CVE-2018-11683: Fixed a stack-based buffer overflow in the function\n  parseChars() in compileTranslationTable.c (different vulnerability than\n  CVE-2018-11440) (bsc#1095827)\n- CVE-2018-11684: Fixed stack-based buffer overflow in the function\n  includeFile() in compileTranslationTable.c (bsc#1095826)\n- CVE-2018-11685: Fixed a stack-based buffer overflow in the function\n  compileHyphenation() in compileTranslationTable.c (bsc#1095825)\n- CVE-2018-12085: Fixed a stack-based buffer overflow in the function\n  parseChars() in compileTranslationTable.c (different vulnerability than\n  CVE-2018-11440) (bsc#1097103)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","modified":"2026-03-11T07:32:04.395791Z","published":"2019-04-05T10:06:53Z","related":["CVE-2018-11410","CVE-2018-11440","CVE-2018-11577","CVE-2018-11683","CVE-2018-11684","CVE-2018-11685","CVE-2018-12085","CVE-2018-17294"],"upstream":["CVE-2018-11410","CVE-2018-11440","CVE-2018-11577","CVE-2018-11683","CVE-2018-11684","CVE-2018-11685","CVE-2018-12085","CVE-2018-17294"],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QCDNK5Q6ITKQTT77S47V5FM4FO26BMI5/#QCDNK5Q6ITKQTT77S47V5FM4FO26BMI5"},{"type":"REPORT","url":"https://bugzilla.suse.com/1094685"},{"type":"REPORT","url":"https://bugzilla.suse.com/1095189"},{"type":"REPORT","url":"https://bugzilla.suse.com/1095825"},{"type":"REPORT","url":"https://bugzilla.suse.com/1095826"},{"type":"REPORT","url":"https://bugzilla.suse.com/1095827"},{"type":"REPORT","url":"https://bugzilla.suse.com/1095945"},{"type":"REPORT","url":"https://bugzilla.suse.com/1097103"},{"type":"REPORT","url":"https://bugzilla.suse.com/1109319"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-11410"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-11440"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-11577"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-11683"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-11684"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-11685"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-12085"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-17294"}],"affected":[{"package":{"name":"liblouis","ecosystem":"openSUSE:Leap 15.0","purl":"pkg:rpm/opensuse/liblouis&distro=openSUSE%20Leap%2015.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-lp150.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"liblouis-doc":"3.3.0-lp150.3.3.1","liblouis-tools":"3.3.0-lp150.3.3.1","liblouis14":"3.3.0-lp150.3.3.1","python3-louis":"3.3.0-lp150.3.3.1","liblouis-data":"3.3.0-lp150.3.3.1","liblouis-devel":"3.3.0-lp150.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:1160-1.json"}}],"schema_version":"1.7.5"}