Security
Security
A vulnerability in Pango could result in a Denial of Service condition.
| Package | x11-libs/pango on all architectures |
|---|---|
| Affected versions | < 1.42.4 |
| Unaffected versions | >= 1.42.4 |
Library for layout and rendering of internationalized text.
Processing certain invalid Emoji sequences in a GTK+ application can trigger a reachable assertion resulting in an application crash.
A remote attacker could provide a specially crafted Emoji sequences, possibly resulting in a Denial of Service condition.
There is no known workaround at this time.
All Pango users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=x11-libs/pango-1.42.4"
Release date
November 10, 2018
Latest revision
November 10, 2018: 1
Severity
normal
Exploitable
remote
Bugzilla entries