Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 543
Alerts This Week
Warning Icon 1 543

Debian: DSA-4496-1 Urgent: Pango Heap Overflow Vulnerability Alert

debian
Calendar Grey August 11, 2019
Debian Logo
Pango deprecated components need updating because of a heap overflow vulnerability impacting Debian applications. Prioritize security!
Benno Fuenfstueck discovered that Pango, a library for layout and rendering of text with an emphasis on internationalization, is prone to a heap-based buffer overflow flaw in the p...
Topics%20covered

Topics Covered

security advisory denial of service debian heap overflow pango

Summary

For the stable distribution (buster), this problem has been fixed in
version 1.42.4-7~deb10u1.

We recommend that you upgrade your pango1.0 packages.

For the detailed security status of pango1.0 please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/source-package/pango1.0

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: pango1.0
CVE ID: CVE-2019-1010238

Topics%20covered

Topics Covered

security advisory denial of service debian heap overflow pango

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.