Nom du paquet
pango
Date
2010-06-22
Advisory ID
MDVSA-2010:121
Affected versions
2009.0 x86_64 , MES5 i586 , 2010.0 x86_64 , 2010.0 i586 , 2009.1 i586 , 2009.0 i586 , 2008.0 x86_64 , 2008.0 i586 , 2009.1 x86_64 , MES5 x86_64

Problem description

A vulnerability has been discovered and corrected in pango:

Array index error in the hb_ot_layout_build_glyph_classes function
in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows
context-dependent attackers to cause a denial of service (application
crash) via a crafted font file, related to building a synthetic
Glyph Definition (aka GDEF) table by using this font's charmap and
the Unicode property database (CVE-2010-0421).

Packages for 2008.0 and 2009.0 are provided as of the Extended
Maintenance Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149&products_id=490

The updated packages have been patched to correct this issue.

Updated packages

2009.0 x86_64

 d89182f1a67df154436f911ab49c998c  2009.0/x86_64/lib64pango1.0_0-1.22.0-1.2mdv2009.0.x86_64.rpm
 5128373e230e002664ac1ee89196b4c2  2009.0/x86_64/lib64pango1.0_0-modules-1.22.0-1.2mdv2009.0.x86_64.rpm
 bb99fd715de3806760035e88fcf54004  2009.0/x86_64/lib64pango1.0-devel-1.22.0-1.2mdv2009.0.x86_64.rpm
 ac258b1e139acc2ea92c208fdedcf008  2009.0/x86_64/pango-1.22.0-1.2mdv2009.0.x86_64.rpm
 b66f33df75d3889033d9331f4faa81e6  2009.0/x86_64/pango-doc-1.22.0-1.2mdv2009.0.x86_64.rpm 
 61b1e84d9e94441486739e706e5807aa  2009.0/SRPMS/pango-1.22.0-1.2mdv2009.0.src.rpm

MES5 i586

 d6decc56a38a11a5a13984fc83559385  mes5/i586/libpango1.0_0-1.22.0-1.2mdvmes5.1.i586.rpm
 e5d925f17dd0701cf3c49f08c29fe603  mes5/i586/libpango1.0_0-modules-1.22.0-1.2mdvmes5.1.i586.rpm
 17c7a506f6808b3ee9f5f6b75a5379fa  mes5/i586/libpango1.0-devel-1.22.0-1.2mdvmes5.1.i586.rpm
 0e5dd5095994251fde994f2fa26358e8  mes5/i586/pango-1.22.0-1.2mdvmes5.1.i586.rpm
 63a4f9187fe13157433ce165f4ef9efd  mes5/i586/pango-doc-1.22.0-1.2mdvmes5.1.i586.rpm 
 6425231a4d3181a952f1f5d16551ccd9  mes5/SRPMS/pango-1.22.0-1.2mdvmes5.1.src.rpm

2010.0 x86_64

 f4744cc096aac8bfd32240331881e99e  2010.0/x86_64/lib64pango1.0_0-1.26.1-1.2mdv2010.0.x86_64.rpm
 54919bd634eaa10ecbbcb5e140650973  2010.0/x86_64/lib64pango1.0_0-modules-1.26.1-1.2mdv2010.0.x86_64.rpm
 18bdc1b62b64ed3381e8bc98b8ec20ad  2010.0/x86_64/lib64pango1.0-devel-1.26.1-1.2mdv2010.0.x86_64.rpm
 2a6613f8941689eff8a3dd780cf04b11  2010.0/x86_64/pango-1.26.1-1.2mdv2010.0.x86_64.rpm
 c0a1406e8ed4096bf5481fe38837b6dc  2010.0/x86_64/pango-doc-1.26.1-1.2mdv2010.0.x86_64.rpm 
 08b72577a1117f4fc2f29f53f5edeaec  2010.0/SRPMS/pango-1.26.1-1.2mdv2010.0.src.rpm

2010.0 i586

 7aa21a2139fa09a02c3134d24df405c4  2010.0/i586/libpango1.0_0-1.26.1-1.2mdv2010.0.i586.rpm
 ba1ce579d66cad852f38dff557370a3a  2010.0/i586/libpango1.0_0-modules-1.26.1-1.2mdv2010.0.i586.rpm
 a96ce9eb840b45496004761a8bf0c685  2010.0/i586/libpango1.0-devel-1.26.1-1.2mdv2010.0.i586.rpm
 2c964e5dd3b3ac686fff3edc5bd7e712  2010.0/i586/pango-1.26.1-1.2mdv2010.0.i586.rpm
 6ef221cd2253d26187117ae4a7cb7dd9  2010.0/i586/pango-doc-1.26.1-1.2mdv2010.0.i586.rpm 
 08b72577a1117f4fc2f29f53f5edeaec  2010.0/SRPMS/pango-1.26.1-1.2mdv2010.0.src.rpm

2009.1 i586

 e051fbe50943e1b8ff04e6bda1a6731e  2009.1/i586/libpango1.0_0-1.24.1-1.1mdv2009.1.i586.rpm
 d4004ac5c7b3554005acef696c95ed17  2009.1/i586/libpango1.0_0-modules-1.24.1-1.1mdv2009.1.i586.rpm
 1753030920b0dc28410ec500027f5fa8  2009.1/i586/libpango1.0-devel-1.24.1-1.1mdv2009.1.i586.rpm
 6d113a2583bf72252c6986d4161e30eb  2009.1/i586/pango-1.24.1-1.1mdv2009.1.i586.rpm
 9bb53788f7448ff149203a1ecc57d88b  2009.1/i586/pango-doc-1.24.1-1.1mdv2009.1.i586.rpm 
 19b1fd94242fe7477bfd3c9f332be5cb  2009.1/SRPMS/pango-1.24.1-1.1mdv2009.1.src.rpm

2009.0 i586

 f818a1b8cf40a15ca6e7d4a578f858b0  2009.0/i586/libpango1.0_0-1.22.0-1.2mdv2009.0.i586.rpm
 dc25662f0d2b9d0b36597935d32cf0e0  2009.0/i586/libpango1.0_0-modules-1.22.0-1.2mdv2009.0.i586.rpm
 9de63eebb567bac21147c9a71929fa94  2009.0/i586/libpango1.0-devel-1.22.0-1.2mdv2009.0.i586.rpm
 5f2d9e530f510715ba9800da9132507c  2009.0/i586/pango-1.22.0-1.2mdv2009.0.i586.rpm
 54264e559ff61ea82ce0aaa10fcd7807  2009.0/i586/pango-doc-1.22.0-1.2mdv2009.0.i586.rpm 
 61b1e84d9e94441486739e706e5807aa  2009.0/SRPMS/pango-1.22.0-1.2mdv2009.0.src.rpm

2008.0 x86_64

 d4c104a71623556bfaae5b910d72d188  2008.0/x86_64/lib64pango1.0_0-1.18.2-1.2mdv2008.0.x86_64.rpm
 e019d97785600e3e4bfb5d0f9ab72b74  2008.0/x86_64/lib64pango1.0_0-modules-1.18.2-1.2mdv2008.0.x86_64.rpm
 21303d77e999fb7ea751c7e187a6ea89  2008.0/x86_64/lib64pango1.0-devel-1.18.2-1.2mdv2008.0.x86_64.rpm
 1a5f6892ee5e0bd5b17aaea3f05c07f3  2008.0/x86_64/pango-1.18.2-1.2mdv2008.0.x86_64.rpm
 844fed2ee045b84c34a7d24adcc0ca1b  2008.0/x86_64/pango-doc-1.18.2-1.2mdv2008.0.x86_64.rpm 
 199adcc22840415441eae58ab0d686f5  2008.0/SRPMS/pango-1.18.2-1.2mdv2008.0.src.rpm

2008.0 i586

 531ca422fc6a6777106d52a282ba6f3e  2008.0/i586/libpango1.0_0-1.18.2-1.2mdv2008.0.i586.rpm
 f23ea5bef4b70a102e857faa17bde950  2008.0/i586/libpango1.0_0-modules-1.18.2-1.2mdv2008.0.i586.rpm
 1c015751f614a1559636d91bf4dbf658  2008.0/i586/libpango1.0-devel-1.18.2-1.2mdv2008.0.i586.rpm
 327fa9bbc9553e8b6e32154d147ac9cd  2008.0/i586/pango-1.18.2-1.2mdv2008.0.i586.rpm
 b18559906ed0c756fd2232d7286ef3e9  2008.0/i586/pango-doc-1.18.2-1.2mdv2008.0.i586.rpm 
 199adcc22840415441eae58ab0d686f5  2008.0/SRPMS/pango-1.18.2-1.2mdv2008.0.src.rpm

2009.1 x86_64

 96905bb1cb15f2f78eca3f1fc18a18ff  2009.1/x86_64/lib64pango1.0_0-1.24.1-1.1mdv2009.1.x86_64.rpm
 155f81e153d65cce320ad7b1038caccd  2009.1/x86_64/lib64pango1.0_0-modules-1.24.1-1.1mdv2009.1.x86_64.rpm
 6ccb79cec84f207d2bf032cec02fb828  2009.1/x86_64/lib64pango1.0-devel-1.24.1-1.1mdv2009.1.x86_64.rpm
 84a045a5db31ccf90df5910ad8908e93  2009.1/x86_64/pango-1.24.1-1.1mdv2009.1.x86_64.rpm
 d3b06564ce5342d98162e5b62fda7379  2009.1/x86_64/pango-doc-1.24.1-1.1mdv2009.1.x86_64.rpm 
 19b1fd94242fe7477bfd3c9f332be5cb  2009.1/SRPMS/pango-1.24.1-1.1mdv2009.1.src.rpm

MES5 x86_64

 116891a295279dba835c846c69dcfb93  mes5/x86_64/lib64pango1.0_0-1.22.0-1.2mdvmes5.1.x86_64.rpm
 9d75fb24121b6852985dd8be7edbe59b  mes5/x86_64/lib64pango1.0_0-modules-1.22.0-1.2mdvmes5.1.x86_64.rpm
 26bbb15efd26cdd94c9d8ee2e4a7278d  mes5/x86_64/lib64pango1.0-devel-1.22.0-1.2mdvmes5.1.x86_64.rpm
 4ea150efc21c643109197382c0c592f0  mes5/x86_64/pango-1.22.0-1.2mdvmes5.1.x86_64.rpm
 4dd5ce363b7eaa068cab0c387cc23230  mes5/x86_64/pango-doc-1.22.0-1.2mdvmes5.1.x86_64.rpm 
 6425231a4d3181a952f1f5d16551ccd9  mes5/SRPMS/pango-1.22.0-1.2mdvmes5.1.src.rpm

References