Описание
Security update for pango
This update for pango fixes the following issues:
Security issue fixed:
- CVE-2018-15120: Fixed a denial of service when parsing emoji (bsc#1103877)
Список пакетов
SUSE Linux Enterprise Module for Basesystem 15
libpango-1_0-0-1.40.14-3.3.1
pango-devel-1.40.14-3.3.1
typelib-1_0-Pango-1_0-1.40.14-3.3.1
SUSE Linux Enterprise Module for Desktop Applications 15
libpango-1_0-0-32bit-1.40.14-3.3.1
Ссылки
- Link for SUSE-SU-2018:2763-1
- E-Mail link for SUSE-SU-2018:2763-1
- SUSE Security Ratings
- SUSE Bug 1103877
- SUSE CVE CVE-2018-15120 page
Описание
libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted text with invalid Unicode sequences.
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15:libpango-1_0-0-1.40.14-3.3.1
SUSE Linux Enterprise Module for Basesystem 15:pango-devel-1.40.14-3.3.1
SUSE Linux Enterprise Module for Basesystem 15:typelib-1_0-Pango-1_0-1.40.14-3.3.1
SUSE Linux Enterprise Module for Desktop Applications 15:libpango-1_0-0-32bit-1.40.14-3.3.1
Ссылки
- CVE-2018-15120
- SUSE Bug 1103877