Security update for liblouis SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:2569-1 Final 1 1 2018-08-31T07:12:00Z current 2018-08-31T07:12:00Z 2018-08-31T07:12:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for liblouis This update for liblouis, python-louis fixes the following issues: Security issues fixed: - CVE-2018-11684: Fixed stack-based buffer overflow in the function includeFile() in compileTranslationTable.c (bsc#1095826) - CVE-2018-11685: Fixed a stack-based buffer overflow in the function compileHyphenation() in compileTranslationTable.c (bsc#1095825) - CVE-2018-11683: Fix a stack-based buffer overflow in the function parseChars() in compileTranslationTable.c (bsc#1095827) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). slessp4-liblouis-13764 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20182569-1/ Link for SUSE-SU-2018:2569-1 https://lists.suse.com/pipermail/sle-security-updates/2018-August/004520.html E-Mail link for SUSE-SU-2018:2569-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1095825 SUSE Bug 1095825 https://bugzilla.suse.com/1095826 SUSE Bug 1095826 https://bugzilla.suse.com/1095827 SUSE Bug 1095827 https://www.suse.com/security/cve/CVE-2018-11683/ SUSE CVE CVE-2018-11683 page https://www.suse.com/security/cve/CVE-2018-11684/ SUSE CVE CVE-2018-11684 page https://www.suse.com/security/cve/CVE-2018-11685/ SUSE CVE CVE-2018-11685 page SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 liblouis-1.7.0-1.3.13.1 liblouis0-1.7.0-1.3.13.1 python-louis-1.7.0-1.3.13.1 liblouis-1.7.0-1.3.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 liblouis0-1.7.0-1.3.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 python-louis-1.7.0-1.3.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 liblouis-1.7.0-1.3.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 liblouis0-1.7.0-1.3.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 python-louis-1.7.0-1.3.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440. CVE-2018-11683 SUSE Linux Enterprise Server 11 SP4:liblouis-1.7.0-1.3.13.1 SUSE Linux Enterprise Server 11 SP4:liblouis0-1.7.0-1.3.13.1 SUSE Linux Enterprise Server 11 SP4:python-louis-1.7.0-1.3.13.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:liblouis-1.7.0-1.3.13.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:liblouis0-1.7.0-1.3.13.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-louis-1.7.0-1.3.13.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182569-1/ https://www.suse.com/security/cve/CVE-2018-11683.html CVE-2018-11683 https://bugzilla.suse.com/1095827 SUSE Bug 1095827 https://bugzilla.suse.com/1096665 SUSE Bug 1096665 Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c. CVE-2018-11684 SUSE Linux Enterprise Server 11 SP4:liblouis-1.7.0-1.3.13.1 SUSE Linux Enterprise Server 11 SP4:liblouis0-1.7.0-1.3.13.1 SUSE Linux Enterprise Server 11 SP4:python-louis-1.7.0-1.3.13.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:liblouis-1.7.0-1.3.13.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:liblouis0-1.7.0-1.3.13.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-louis-1.7.0-1.3.13.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182569-1/ https://www.suse.com/security/cve/CVE-2018-11684.html CVE-2018-11684 https://bugzilla.suse.com/1095826 SUSE Bug 1095826 Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c. CVE-2018-11685 SUSE Linux Enterprise Server 11 SP4:liblouis-1.7.0-1.3.13.1 SUSE Linux Enterprise Server 11 SP4:liblouis0-1.7.0-1.3.13.1 SUSE Linux Enterprise Server 11 SP4:python-louis-1.7.0-1.3.13.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:liblouis-1.7.0-1.3.13.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:liblouis0-1.7.0-1.3.13.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-louis-1.7.0-1.3.13.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182569-1/ https://www.suse.com/security/cve/CVE-2018-11685.html CVE-2018-11685 https://bugzilla.suse.com/1095825 SUSE Bug 1095825