Vulnerability Bulletins |
DSA-4496 pango1.0 - security update |
|
| Affected software | Debian |
|
Benno Fuenfstueck discovered that Pango, a library for layout andrendering of text with an emphasis on internationalization, is prone to aheap-based buffer overflow flaw in the pango_log2vis_get_embedding_levelsfunction. An attacker can take advantage of this flaw for denial ofservice or potentially the execution of arbitrary code. More info: https://www.debian.org/security/2019/dsa-4496 |
|