Joined: 12 May 2004
|Posted: Sat Nov 10, 2018 2:26 am Post subject: [ GLSA 201811-07 ] Pango
|Gentoo Linux Security Advisory
Title: Pango: Denial of Service (GLSA 201811-07)
A vulnerability in Pango could result in a Denial of Service
Library for layout and rendering of internationalized text.
Vulnerable: < 1.42.4
Unaffected: >= 1.42.4
Architectures: All supported architectures
Processing certain invalid Emoji sequences in a GTK+ application can
trigger a reachable assertion resulting in an application crash.
A remote attacker could provide a specially crafted Emoji sequences,
possibly resulting in a Denial of Service condition.
There is no known workaround at this time.
All Pango users should upgrade to the latest version:
|# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-libs/pango-1.42.4"