pango-1.14.9-8.AXS3

エラータID: AXSA:2010-147:02

Release date: 
Tuesday, March 16, 2010 - 13:54
Subject: 
pango-1.14.9-8.AXS3
Affected Channels: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
High
Description: 

Pango is a system for layout and rendering of internationalized text.
Security issues fixed with this release:
CVE-2010-0421
No description available at the time of writing.

Solution: 

Update packages.

CVEs: 
CVE-2010-0421
Array index error in the hb_ot_layout_build_glyph_classes function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted font file, related to building a synthetic Glyph Definition (aka GDEF) table by using this font's charmap and the Unicode property database.


Additional Info: 

N/A

Download: 

SRPMS
  1. pango-1.14.9-8.AXS3.src.rpm
    MD5: 6b847f5e28f69c616ccf11a2b4cecf76
    SHA-256: 860cf937a366aacf03b63333d8bd2e04788931e4e2e645d865b067dfbaba889e
    Size: 1.17 MB

Asianux Server 3 for x86
  1. pango-1.14.9-8.AXS3.i386.rpm
    MD5: 8f5124d3cebdb0c9e974cc809105ba0d
    SHA-256: 39ebff24d74ca6fd7eff265fcea5b2ea56e6884bf954f7d29380eb18f104da83
    Size: 336.35 kB
  2. pango-devel-1.14.9-8.AXS3.i386.rpm
    MD5: 5897857a743f6600bfd1f2c0be087f48
    SHA-256: 7b341d59e0c11c782683b05d94106c5156689a23348a2a934d71db53cb51bd1f
    Size: 277.06 kB

Asianux Server 3 for x86_64
  1. pango-1.14.9-8.AXS3.x86_64.rpm
    MD5: bcf15e1a2d32c78be985ebbcc9c20d7d
    SHA-256: d043c716bed67a628c5e37c17c9875d172f51861b1c20d799d18c9f36cc95e2c
    Size: 339.68 kB
  2. pango-devel-1.14.9-8.AXS3.x86_64.rpm
    MD5: c70535bd3ccf258af90b92eb330242f2
    SHA-256: fd469dd83b66f08cfd4fb67892f21d6f1668d94e78cf0a56629ee7b43dbf8193
    Size: 277.79 kB