Alerts This Week
Warning Icon 1 537
Alerts This Week
Warning Icon 1 537

SUSE: 2018:2780-1 Moderate: Liblouis Buffer Overflow Fixes

suse
Calendar Grey September 21, 2018
Dist Suse Esm H88
SUSE released a vital security update for liblouis, addressing moderate severity vulnerabilities. Updating is crucial for system safety and integrity.
An update that fixes 6 vulnerabilities is now available

Summary

This update for liblouis, python-louis, python3-louis fixes the following issues: Security issues fixed: - CVE-2018-11440: Fixed a stack-based buffer overflow in the function parseChars() in compileTranslationTable.c (bsc#1095189) - CVE-2018-11577: Fixed a segmentation fault in lou_logPrint in logging.c (bsc#1095945) - CVE-2018-11683: Fixed a stack-based buffer overflow in the function parseChars() in compileTranslationTable.c (different vulnerability than CVE-2018-11440) (bsc#1095827) - CVE-2018-11684: Fixed stack-based buffer overflow in the function includeFile() in compileTranslationTable.c (bsc#1095826) - CVE-2018-11685: Fixed a stack-based buffer overflow in the function compileHyphenation() in compileTranslationTable.c (bsc#1095825)

References

#1095189 #1095825 #1095826 #1095827 #1095945

#1097103

Cross- CVE-2018-11440 CVE-2018-11577 CVE-2018-11683

CVE-2018-11684 CVE-2018-11685 CVE-2018-12085

Affected Products:

SUSE Linux Enterprise Software Development Kit 12-SP3

SUSE Linux Enterprise Server 12-SP3

SUSE Linux Enterprise Desktop 12-SP3

https://www.suse.com/security/cve/CVE-2018-11440.html

https://www.suse.com/security/cve/CVE-2018-11577.html

https://www.suse.com/security/cve/CVE-2018-11683.html

https://www.suse.com/security/cve/CVE-2018-11684.html

https://www.suse.com/security/cve/CVE-2018-11685.html

https://www.suse.com/security/cve/CVE-2018-12085.html

https://bugzilla.suse.com/1095189

https://bugzilla.suse.com/1095825

https://bugzilla.suse.com/1095826

Announcement ID: SUSE-SU-2018:2780-1
Rating: moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here