EulerOS 2.0 SP8 : pango (EulerOS-SA-2019-2088)

According to the version of the pango packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The...

CentOS 7 : pango (CESA-2019:2571)

An update for pango is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CentOS Update for pango CESA-2019:2571 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

pango security update

CentOS Errata and Security Advisory CESA-2019:2571 An update for pango is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

GLSA-201909-03 : Pango: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-201909-03 Pango: Buffer overflow A buffer overflow has been discovered in Pangos pangolog2visgetembeddinglevels function. Impact : A remote attacker could entice a user to process a specially crafted string with functions like...

Pango: Buffer overflow

Background Pango is a library for layout and rendering of internationalized text. Description A buffer overflow has been discovered in Pango’s pangolog2visgetembeddinglevels function. Impact A remote attacker could entice a user to process a specially crafted string with functions like...

Fedora 29 : pango (2019-155e34df5a)

Security fix for CVE-2019-1010238 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Networ...

Updated pango packages fix security vulnerability

Updated pango package fixes security vulnerability: It was discovered that pango was subject to a heap based buffer overflow vulnerability which could be used to get code execution CVE-2019-1010238...

MGASA-2019-0235 Updated pango packages fix security vulnerability

Updated pango package fixes security vulnerability: It was discovered that pango was subject to a heap based buffer overflow vulnerability which could be used to get code execution CVE-2019-1010238...

[SECURITY] Fedora 29 Update: pango-1.42.4-3.fc29

Pango is a library for laying out and rendering of text, with an emphasis on internationalization. Pango can be used anywhere that text layout is nee ded, though most of the work on Pango so far has been done in the context of the GTK+ widget toolkit. Pango forms the core of text and font handlin...

Fedora Update for pango FEDORA-2019-155e34df5a

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Oracle Linux 8 : pango (ELSA-2019-2582)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2582 advisory. - Security fix for CVE-2019-1010238 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

RHEL 7 : pango (RHSA-2019:2571)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2571 advisory. Pango is a library for laying out and rendering of text, with an emphasis on internationalization. Pango forms the core of text and font handling for...

RHEL 8 : pango (RHSA-2019:2582)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2582 advisory. Pango is a library for laying out and rendering of text, with an emphasis on internationalization. Pango forms the core of text and font handling for...

pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

A buffer overflow flaw was found in Gnome Pango. When invalid utf-8 strings are passed to functions, a heap-based buffer overflow can occur that could lead to code execution. The highest threat from this vulnerability is data confidentiality and integrity as well as system availability...

Important: Red Hat Security Advisory: pango security update

An update for pango is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Arbitrary Code Execution

pango is vulnerable to arbitrary code execution. A heap-based buffer overflow in the function pangolog2visgetembeddinglevels allows a remote attacker to execute arbitrary code by passing malicious utf-8 strings to the pangoitemize function...

pango security update

1.42.4-5 - Fixes crash in pangofcfontkeygetvariations when key is null 1.42.4-4 - Fixes bidi crash - Security fix for CVE-2019-1010238 - Resolves: 1738461 1.42.4-3 - rebuild 1.42.4-2 - rebuild...

Scientific Linux Security Update : pango on SL7.x x86_64 (20190828)

Security Fixes : - pango: pangolog2visgetembeddinglevels heap-based buffer overflow CVE-2019-1010238 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128311; scriptversion"1.4";...

Important: Red Hat Security Advisory: pango security update

An update for pango is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...