Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia: 2019-0311 Critical Advisory for Aspell Buffer Over-Read

mageia
Calendar Grey November 2, 2019
Dist Mageia Esm H88
Newly released aspell updates address significant security vulnerabilities in Mageia involving a critical stack-based buffer over-read issue. Further details can be found here.
Updated aspell packages fix security vulnerability: libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an is...

Summary

Updated aspell packages fix security vulnerability:
libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character (CVE-2019-17544).

References

- https://bugs.mageia.org/show_bug.cgi?id=25640

- https://ubuntu.com/security/notices/USN-4155-1

- https://www.cve.org/CVERecord?id=CVE-2019-17544

Topics%20covered

Topics Covered

security advisory software update buffer over-read Mageia GNU Aspell stack-based buffer libaspell

Resolution

SRPMS

- 7/core/aspell-0.60.8-1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 02 Nov 2019
URL: https://advisories.mageia.org/MGASA-2019-0311.html
Type: security
CVE: CVE-2019-17544

Topics%20covered

Topics Covered

security advisory software update buffer over-read Mageia GNU Aspell stack-based buffer libaspell

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here