Red Hat Security AdvisoryRHSA-2010:0140
pango security update
Released 2010-03-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 pango-1.2.5-10, pango-1.2.5-10.i386, pango-devel-1.2.5-10 +1
- Red Hat Enterprise Linux (v. 5 server) pango-1.14.9-8.el5, pango-1.14.9-8.el5.i386, pango-1.14.9-8.el5.ia64 +5
- Red Hat Enterprise Linux AS version 3 pango-1.2.5-10, pango-1.2.5-10.i386, pango-1.2.5-10.ia64 +5
- Red Hat Enterprise Linux AS version 4 evolution28-pango-1.14.9-13.el4_8, evolution28-pango-1.14.9-13.el4_8.i386, evolution28-pango-1.14.9-13.el4_8.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) pango-1.14.9-8.el5, pango-1.14.9-8.el5.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) pango-1.14.9-8.el5, pango-devel-1.14.9-8.el5, pango-devel-1.14.9-8.el5.i386
- Red Hat Enterprise Linux Desktop version 4 evolution28-pango-1.14.9-13.el4_8, evolution28-pango-1.14.9-13.el4_8.i386, evolution28-pango-devel-1.14.9-13.el4_8 +5
- Red Hat Enterprise Linux ES version 3 pango-1.2.5-10, pango-1.2.5-10.i386, pango-1.2.5-10.ia64 +3
- Red Hat Enterprise Linux ES version 4 evolution28-pango-1.14.9-13.el4_8, evolution28-pango-1.14.9-13.el4_8.i386, evolution28-pango-1.14.9-13.el4_8.ia64 +9
- Red Hat Enterprise Linux WS version 3 pango-1.2.5-10, pango-1.2.5-10.i386, pango-1.2.5-10.ia64 +3
- Red Hat Enterprise Linux WS version 4 evolution28-pango-1.14.9-13.el4_8, evolution28-pango-1.14.9-13.el4_8.i386, evolution28-pango-1.14.9-13.el4_8.ia64 +9
Fixes 1 record
Priority LOW 25
Array index error in the hb_ot_layout_build_glyph_classes function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafte…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02448 · Published 2010-03-18 · Fixed CWE-119
