Oracle Linux 5 : pango (ELSA-2009-0476)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-0476 advisory. 1.14.9-4 - Add pango-glyphstring.patch - Resolves: 497361 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 5 : pango (ELSA-2010-0140)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0140 advisory. 1.14.9-8.el5 - Updated synthetic-gdef patch - Resolves: 559169 1.14.9-7.el5 - Add synthetic-gdef patch - Resolves: 559169 Tenable has extracted the preceding...

Oracle Linux 4 : evolution28-pango (ELSA-2011-1325)

From Red Hat Security Advisory 2011:1325 : Updated evolution28-pango packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...

CVE-2013-0927

Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c readconfig implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGORCFILE environment variable, which allows attackers to bypass intended access restrictions...

Directory traversal

Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c readconfig implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGORCFILE environment variable, which allows attackers to bypass intended access restrictions...

CVE-2013-0927

Chrome OS prior to 26.0.1410.57 is affected by CVE-2013-0927 due to a Pango pango-utils.c read_config flaw that loads the user’s .pangorc and the file pointed to by PANGO_RC_FILE, allowing attackers to bypass access restrictions with crafted configuration data. The issue arises from how configura...

CVE-2013-0927

Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c readconfig implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGORCFILE environment variable, which allows attackers to bypass intended access restrictions...

CVE-2013-0927: Improper Link Resolution Before File Access

Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c readconfig implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGORCFILE environment variable, which allows attackers to bypass intended access restrictions...

Scientific Linux Security Update : pango on SL3.x, SL4.x, SL5.x i386/x86_64

Will Drewry discovered an integer overflow flaw in Pango's pangoglyphstringsetsize function. If an attacker is able to pass an arbitrarily long string to Pango, it may be possible to execute arbitrary code with the permissions of the application calling Pango. CVE-2009-1194 After installing this...

Scientific Linux Security Update : evolution28-pango on SL4.x i386/x86_64

Pango is a library used for the layout and rendering of internationalized text. A buffer overflow flaw was found in HarfBuzz, an OpenType text shaping engine used in Pango. If a user loaded a specially crafted font file with an application that uses Pango, it could cause the application to crash...

Scientific Linux Security Update : pango on SL3.x, SL4.x, SL5.x i386/x86_64

CVE-2010-0421 libpangoft2 segfaults on forged font files An input sanitization flaw, leading to an array index error, was found in the way the Pango font rendering library synthesized the Glyph Definition GDEF table from a font's character map and the Unicode property database. If an attacker...

Scientific Linux Security Update : pango on SL6.x i386/x86_64

It was discovered that Pango did not check for memory reallocation failures in the hbbufferensure function. An attacker able to trigger a reallocation failure by passing sufficiently large input to an application using Pango could use this flaw to crash the application or, possibly, execute...

Scientific Linux Security Update : pango on SL4.x, SL5.x i386/x86_64

An input sanitization flaw, leading to a heap-based buffer overflow, was found in the way Pango displayed font files when using the FreeType font engine back end. If a user loaded a malformed font file with an application that uses Pango, it could cause the application to crash or, possibly,...

Scientific Linux Security Update : frysk on SL4.x i386/x86_64

frysk is an execution-analysis technology implemented using native Java and C++. It provides developers and system administrators with the ability to examine and analyze multi-host, multi-process, and multithreaded systems while they are running. frysk is released as a Technology Preview for...

Scientific Linux Security Update : pango on SL5.x i386/x86_64

Pango is a library used for the layout and rendering of internationalized text. A buffer overflow flaw was found in HarfBuzz, an OpenType text shaping engine used in Pango. If a user loaded a specially crafted font file with an application that uses Pango, it could cause the application to crash...

CentOS Update for evolution28-pango CESA-2011:0180 centos4 x86_64

Check for the Version of evolution28-pango OpenVAS Vulnerability Test CentOS Update for evolution28-pango CESA-2011:0180 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

CentOS Update for evolution28-pango CESA-2011:1325 centos4 x86_64

Check for the Version of evolution28-pango OpenVAS Vulnerability Test CentOS Update for evolution28-pango CESA-2011:1325 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

CentOS Update for evolution28-pango CESA-2011:1325 centos4 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for evolution28-pango CESA-2011:0180 centos4 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for pango CESA-2011:1326 centos5 x86_64

Check for the Version of pango OpenVAS Vulnerability Test CentOS Update for pango CESA-2011:1326 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...