Red Hat Security AdvisoryRHSA-2011:0180
pango security update
Released 2011-01-27 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5.6.z server) pango-1.14.9-8.el5_6.2, pango-1.14.9-8.el5_6.2.i386, pango-1.14.9-8.el5_6.2.ia64 +5
- Red Hat Enterprise Linux AS version 4 evolution28-pango-1.14.9-13.el4_10, evolution28-pango-1.14.9-13.el4_10.i386, evolution28-pango-1.14.9-13.el4_10.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 6) pango-1.28.1-3.el6_0.3
- Red Hat Enterprise Linux Desktop Optional (v. 6) pango-1.28.1-3.el6_0.3, pango-devel-1.28.1-3.el6_0.3
- Red Hat Enterprise Linux Desktop version 4 evolution28-pango-1.14.9-13.el4_10, evolution28-pango-1.14.9-13.el4_10.i386, evolution28-pango-devel-1.14.9-13.el4_10 +1
- Red Hat Enterprise Linux ES version 4 evolution28-pango-1.14.9-13.el4_10, evolution28-pango-1.14.9-13.el4_10.i386, evolution28-pango-1.14.9-13.el4_10.ia64 +3
- Red Hat Enterprise Linux HPC Node (v. 6) pango-1.28.1-3.el6_0.3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) pango-1.28.1-3.el6_0.3, pango-devel-1.28.1-3.el6_0.3
- Red Hat Enterprise Linux Server (v. 6) pango-1.28.1-3.el6_0.3, pango-1.28.1-3.el6_0.3.ppc, pango-devel-1.28.1-3.el6_0.3 +1
- Red Hat Enterprise Linux WS version 4 evolution28-pango-1.14.9-13.el4_10, evolution28-pango-1.14.9-13.el4_10.i386, evolution28-pango-1.14.9-13.el4_10.ia64 +3
- Red Hat Enterprise Linux Workstation (v. 6) pango-1.28.1-3.el6_0.3, pango-devel-1.28.1-3.el6_0.3
Fixes 1 record
Priority MEDIUM 51
Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.18944 · Published 2011-01-24 · Fixed CWE-119
