Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:2780-1

Опубликовано: 21 сент. 2018
Источник: suse-cvrf

Описание

Security update for liblouis

This update for liblouis, python-louis, python3-louis fixes the following issues:

Security issues fixed:

  • CVE-2018-11440: Fixed a stack-based buffer overflow in the function parseChars() in compileTranslationTable.c (bsc#1095189)
  • CVE-2018-11577: Fixed a segmentation fault in lou_logPrint in logging.c (bsc#1095945)
  • CVE-2018-11683: Fixed a stack-based buffer overflow in the function parseChars() in compileTranslationTable.c (different vulnerability than CVE-2018-11440) (bsc#1095827)
  • CVE-2018-11684: Fixed stack-based buffer overflow in the function includeFile() in compileTranslationTable.c (bsc#1095826)
  • CVE-2018-11685: Fixed a stack-based buffer overflow in the function compileHyphenation() in compileTranslationTable.c (bsc#1095825)
  • CVE-2018-12085: Fixed a stack-based buffer overflow in the function parseChars() in compileTranslationTable.c (different vulnerability than CVE-2018-11440) (bsc#1097103)

Список пакетов

SUSE Linux Enterprise Desktop 12 SP3
liblouis-data-2.6.4-6.6.1
liblouis9-2.6.4-6.6.1
python3-louis-2.6.4-6.6.1
SUSE Linux Enterprise Server 12 SP3
liblouis-data-2.6.4-6.6.1
liblouis9-2.6.4-6.6.1
python-louis-2.6.4-6.6.1
python3-louis-2.6.4-6.6.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
liblouis-data-2.6.4-6.6.1
liblouis9-2.6.4-6.6.1
python-louis-2.6.4-6.6.1
python3-louis-2.6.4-6.6.1
SUSE Linux Enterprise Software Development Kit 12 SP3
liblouis-devel-2.6.4-6.6.1

Ссылки

Описание

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:liblouis-data-2.6.4-6.6.1
SUSE Linux Enterprise Desktop 12 SP3:liblouis9-2.6.4-6.6.1
SUSE Linux Enterprise Desktop 12 SP3:python3-louis-2.6.4-6.6.1
SUSE Linux Enterprise Server 12 SP3:liblouis-data-2.6.4-6.6.1
Ссылки

Описание

Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:liblouis-data-2.6.4-6.6.1
SUSE Linux Enterprise Desktop 12 SP3:liblouis9-2.6.4-6.6.1
SUSE Linux Enterprise Desktop 12 SP3:python3-louis-2.6.4-6.6.1
SUSE Linux Enterprise Server 12 SP3:liblouis-data-2.6.4-6.6.1
Ссылки

Описание

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:liblouis-data-2.6.4-6.6.1
SUSE Linux Enterprise Desktop 12 SP3:liblouis9-2.6.4-6.6.1
SUSE Linux Enterprise Desktop 12 SP3:python3-louis-2.6.4-6.6.1
SUSE Linux Enterprise Server 12 SP3:liblouis-data-2.6.4-6.6.1
Ссылки

Описание

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:liblouis-data-2.6.4-6.6.1
SUSE Linux Enterprise Desktop 12 SP3:liblouis9-2.6.4-6.6.1
SUSE Linux Enterprise Desktop 12 SP3:python3-louis-2.6.4-6.6.1
SUSE Linux Enterprise Server 12 SP3:liblouis-data-2.6.4-6.6.1
Ссылки

Описание

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:liblouis-data-2.6.4-6.6.1
SUSE Linux Enterprise Desktop 12 SP3:liblouis9-2.6.4-6.6.1
SUSE Linux Enterprise Desktop 12 SP3:python3-louis-2.6.4-6.6.1
SUSE Linux Enterprise Server 12 SP3:liblouis-data-2.6.4-6.6.1
Ссылки

Описание

Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:liblouis-data-2.6.4-6.6.1
SUSE Linux Enterprise Desktop 12 SP3:liblouis9-2.6.4-6.6.1
SUSE Linux Enterprise Desktop 12 SP3:python3-louis-2.6.4-6.6.1
SUSE Linux Enterprise Server 12 SP3:liblouis-data-2.6.4-6.6.1
Ссылки
Уязвимость SUSE-SU-2018:2780-1