GLSA-201909-03 : Pango: Buffer overflow
High Nessus Plugin ID 128592
SynopsisThe remote Gentoo host is missing one or more security-related patches.
DescriptionThe remote host is affected by the vulnerability described in GLSA-201909-03 (Pango: Buffer overflow)
A buffer overflow has been discovered in Pango’s pango_log2vis_get_embedding_levels function.
A remote attacker could entice a user to process a specially crafted string with functions like pango_itemize, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
SolutionAll Pango users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose '>=x11-libs/pango-1.42.4-r2'