REDHAT-BUG-555831: Medium severity pango vulnerability
Marc Schoenefeld found an improper input sanitization, leading to array indexing error, in the way Pango font rendering library synthesized Glyph Definition Table (GDEF) from the font's character map and the Unicode property database. If a local user was tricked into loading a specially-crafted font file in an application, using the Pango font rendering library, it could lead to denial of service (relevant application crash).
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-555831?
The severity of REDHAT-BUG-555831 is classified as moderate due to improper input sanitization leading to potential local exploitation.
How do I fix REDHAT-BUG-555831?
To fix REDHAT-BUG-555831, update to the latest version of the Pango library that addresses the input sanitization issue.
Who is impacted by REDHAT-BUG-555831?
Local users on systems utilizing the affected Pango library may be impacted by REDHAT-BUG-555831 if they load specially-crafted fonts.
What is the cause of REDHAT-BUG-555831?
REDHAT-BUG-555831 is caused by an improper input sanitization leading to an array indexing error in the Pango font rendering library.
Is there a workaround for REDHAT-BUG-555831?
A temporary workaround for REDHAT-BUG-555831 is to avoid loading untrusted or specially-crafted fonts until the vulnerability is patched.