Red Hat Security AdvisoryRHSA-2009:0476
pango security update
Released 2009-05-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 pango-1.2.5-8, pango-1.2.5-8.i386, pango-devel-1.2.5-8 +1
- Red Hat Enterprise Linux (v. 5 server) pango-1.14.9-5.el5_3, pango-1.14.9-5.el5_3.i386, pango-1.14.9-5.el5_3.ia64 +5
- Red Hat Enterprise Linux AS version 3 pango-1.2.5-8, pango-1.2.5-8.i386, pango-1.2.5-8.ia64 +5
- Red Hat Enterprise Linux AS version 4 evolution28-pango-1.14.9-11.el4_7, evolution28-pango-1.14.9-11.el4_7.i386, evolution28-pango-1.14.9-11.el4_7.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) pango-1.14.9-5.el5_3, pango-1.14.9-5.el5_3.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) pango-1.14.9-5.el5_3, pango-devel-1.14.9-5.el5_3, pango-devel-1.14.9-5.el5_3.i386
- Red Hat Enterprise Linux Desktop version 4 evolution28-pango-1.14.9-11.el4_7, evolution28-pango-1.14.9-11.el4_7.i386, evolution28-pango-devel-1.14.9-11.el4_7 +5
- Red Hat Enterprise Linux ES version 3 pango-1.2.5-8, pango-1.2.5-8.i386, pango-1.2.5-8.ia64 +3
- Red Hat Enterprise Linux ES version 4 evolution28-pango-1.14.9-11.el4_7, evolution28-pango-1.14.9-11.el4_7.i386, evolution28-pango-1.14.9-11.el4_7.ia64 +9
- Red Hat Enterprise Linux WS version 3 pango-1.2.5-8, pango-1.2.5-8.i386, pango-1.2.5-8.ia64 +3
- Red Hat Enterprise Linux WS version 4 evolution28-pango-1.14.9-11.el4_7, evolution28-pango-1.14.9-11.el4_7.i386, evolution28-pango-1.14.9-11.el4_7.ia64 +9
Fixes 1 record
Priority LOW 37
Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary c…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0413 · Published 2009-05-11 · Fixed CWE-189
