{"affected":[{"ecosystem_specific":{"binaries":[{"liblouis-data":"2.6.4-6.6.1","liblouis9":"2.6.4-6.6.1","python3-louis":"2.6.4-6.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","name":"liblouis","purl":"pkg:rpm/suse/liblouis&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.6.4-6.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"liblouis-data":"2.6.4-6.6.1","liblouis9":"2.6.4-6.6.1","python3-louis":"2.6.4-6.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","name":"python3-louis","purl":"pkg:rpm/suse/python3-louis&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.6.4-6.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"liblouis-devel":"2.6.4-6.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","name":"liblouis","purl":"pkg:rpm/suse/liblouis&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.6.4-6.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"liblouis-data":"2.6.4-6.6.1","liblouis9":"2.6.4-6.6.1","python-louis":"2.6.4-6.6.1","python3-louis":"2.6.4-6.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","name":"liblouis","purl":"pkg:rpm/suse/liblouis&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.6.4-6.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"liblouis-data":"2.6.4-6.6.1","liblouis9":"2.6.4-6.6.1","python-louis":"2.6.4-6.6.1","python3-louis":"2.6.4-6.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","name":"python-louis","purl":"pkg:rpm/suse/python-louis&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.6.4-6.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"liblouis-data":"2.6.4-6.6.1","liblouis9":"2.6.4-6.6.1","python-louis":"2.6.4-6.6.1","python3-louis":"2.6.4-6.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","name":"python3-louis","purl":"pkg:rpm/suse/python3-louis&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.6.4-6.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"liblouis-data":"2.6.4-6.6.1","liblouis9":"2.6.4-6.6.1","python-louis":"2.6.4-6.6.1","python3-louis":"2.6.4-6.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","name":"liblouis","purl":"pkg:rpm/suse/liblouis&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.6.4-6.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"liblouis-data":"2.6.4-6.6.1","liblouis9":"2.6.4-6.6.1","python-louis":"2.6.4-6.6.1","python3-louis":"2.6.4-6.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","name":"python-louis","purl":"pkg:rpm/suse/python-louis&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.6.4-6.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"liblouis-data":"2.6.4-6.6.1","liblouis9":"2.6.4-6.6.1","python-louis":"2.6.4-6.6.1","python3-louis":"2.6.4-6.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","name":"python3-louis","purl":"pkg:rpm/suse/python3-louis&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.6.4-6.6.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for liblouis, python-louis, python3-louis fixes the\nfollowing issues:\n\nSecurity issues fixed:\n\n- CVE-2018-11440: Fixed a stack-based buffer overflow in the function\n  parseChars() in compileTranslationTable.c (bsc#1095189)\n- CVE-2018-11577: Fixed a segmentation fault in lou_logPrint in logging.c\n  (bsc#1095945)\n- CVE-2018-11683: Fixed a stack-based buffer overflow in the function\n  parseChars() in compileTranslationTable.c (different vulnerability than\n  CVE-2018-11440) (bsc#1095827)\n- CVE-2018-11684: Fixed stack-based buffer overflow in the function\n  includeFile() in compileTranslationTable.c (bsc#1095826)\n- CVE-2018-11685: Fixed a stack-based buffer overflow in the function\n  compileHyphenation() in compileTranslationTable.c (bsc#1095825)\n- CVE-2018-12085: Fixed a stack-based buffer overflow in the function\n  parseChars() in compileTranslationTable.c (different vulnerability than\n  CVE-2018-11440) (bsc#1097103)\n","id":"SUSE-SU-2018:2780-1","modified":"2018-09-21T05:52:13Z","published":"2018-09-21T05:52:13Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182780-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1095189"},{"type":"REPORT","url":"https://bugzilla.suse.com/1095825"},{"type":"REPORT","url":"https://bugzilla.suse.com/1095826"},{"type":"REPORT","url":"https://bugzilla.suse.com/1095827"},{"type":"REPORT","url":"https://bugzilla.suse.com/1095945"},{"type":"REPORT","url":"https://bugzilla.suse.com/1097103"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-11440"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-11577"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-11683"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-11684"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-11685"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-12085"}],"related":["CVE-2018-11440","CVE-2018-11577","CVE-2018-11683","CVE-2018-11684","CVE-2018-11685","CVE-2018-12085"],"summary":"Security update for liblouis","upstream":["CVE-2018-11440","CVE-2018-11577","CVE-2018-11683","CVE-2018-11684","CVE-2018-11685","CVE-2018-12085"]}