Joined: 12 May 2004
|Posted: Fri Sep 06, 2019 6:26 pm Post subject: [ GLSA 201909-03 ] Pango
|Gentoo Linux Security Advisory
Title: Pango: Buffer overflow (GLSA 201909-03)
A buffer overflow in Pango might allow an attacker to execute
Pango is a library for layout and rendering of internationalized text.
Vulnerable: < 1.42.4-r2
Unaffected: >= 1.42.4-r2
Architectures: All supported architectures
A buffer overflow has been discovered in Pango’s
A remote attacker could entice a user to process a specially crafted
string with functions like pango_itemize, possibly resulting in execution
of arbitrary code with the privileges of the process or a Denial of
There is no known workaround at this time.
All Pango users should upgrade to the latest version:
|# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-libs/pango-1.42.4-r2"