Red Hat Security Advisory

RHSA-2026:92458

aspell security update

Released 2026-10-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) aspell-12:0.60.8-9.el9_8, aspell-devel-12:0.60.8-9.el9_8

TI-2026-71336 CVE-2026-103658

MEDIUM 60

GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader.

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.00213 Published 2026-10-12 Partial fix CWE-122