USN-773-1: Pango vulnerability

iBot · #1 (**permalink**) 05-07-2009

Referenced CVEs:
CVE-2009-1194

Description:
===========================================================Ubuntu Security Notice USN-773-1 May 07, 2009pango1.0 vulnerabilityCVE-2009-1194===========================================================A security issue affects the following Ubuntu releases:Ubuntu 6.06 LTSUbuntu 8.04 LTSUbuntu 8.10This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 6.06 LTS: libpango1.0-0 1.12.3-0ubuntu3.1Ubuntu 8.04 LTS: libpango1.0-0 1.20.5-0ubuntu1.1Ubuntu 8.10: libpango1.0-0 1.22.2-0ubuntu1.1After a standard system upgrade you need to restart your session to effectthe necessary changes.Details follow:Will Drewry discovered that Pango incorrectly handled rendering text withlong glyphstrings. If a user were tricked into displaying specially crafteddata with applications linked against Pango, such as Firefox, an attackercould cause a denial of service or execute arbitrary code with privilegesof the user invoking the program.

More...

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
Pango 1.23.0 (Development branch)	iBot	Software Releases - RSS News	0	02-15-2009 02:50 AM
Pango 1.22.0 (Default branch)	iBot	Software Releases - RSS News	0	09-30-2008 03:00 AM
Pango 1.21.1 (Development branch)	iBot	Software Releases - RSS News	0	05-14-2008 08:30 PM
Pango 1.20.0 (Default branch)	iBot	Software Releases - RSS News	0	03-11-2008 06:50 PM
need help,about pango installing	snowfly	UNIX for Advanced & Expert Users	5	09-13-2007 04:22 PM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode	Rate This Thread:


	Powered by