Red Hat Security AdvisoryRHSA-2011:0309
pango security update
Released 2011-03-01 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) pango-1.28.1-3.el6_0.5
- Red Hat Enterprise Linux Desktop Optional (v. 6) pango-1.28.1-3.el6_0.5, pango-devel-1.28.1-3.el6_0.5
- Red Hat Enterprise Linux HPC Node (v. 6) pango-1.28.1-3.el6_0.5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) pango-1.28.1-3.el6_0.5, pango-devel-1.28.1-3.el6_0.5
- Red Hat Enterprise Linux Server (v. 6) pango-1.28.1-3.el6_0.5, pango-1.28.1-3.el6_0.5.ppc, pango-devel-1.28.1-3.el6_0.5 +1
- Red Hat Enterprise Linux Workstation (v. 6) pango-1.28.1-3.el6_0.5, pango-devel-1.28.1-3.el6_0.5
Fixes 1 record
Priority LOW 36
The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of servic…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03333 · Published 2011-03-07 · Fixed
