Please do not reply directly to this email. All additional comments should be made in the comments box of this bug.
Summary: CVE-2009-1194 pango: pango_glyph_string_set_size integer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=502582
Summary: CVE-2009-1194 pango: pango_glyph_string_set_size integer overflow Product: Fedora Version: rawhide Platform: All URL: http://fedoraproject.org/wiki/Security/TrackingBugs OS/Version: Linux Status: NEW Keywords: Security Severity: high Priority: high Component: pango AssignedTo: besfahbo@redhat.com ReportedBy: thoger@redhat.com QAContact: extras-qa@fedoraproject.org CC: besfahbo@redhat.com, fedora-fonts-bugs-list@redhat.com Classification: Fedora Target Release: ---
This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in all affected branches.
For comments that are specific to the vulnerability please use bugs filed against "Security Response" product referenced in "Blocks" field.
bug #496887: CVE-2009-1194 pango: pango_glyph_string_set_size integer overflow
When creating a Bodhi update request, please include the bug IDs of the respective parent bugs filed against the "Security Response" product. Please mention CVE ids in the RPM changelog when available and only close this bug once all affected Fedora versions are fixed.
Bodhi update submission link: https://admin.fedoraproject.org/updates/new/?type_=security&bugs=496887
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=502582
Tomas Hoger thoger@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |496887(CVE-2009-1194)
--- Comment #1 from Tomas Hoger thoger@redhat.com 2009-05-26 05:29:34 EDT --- F11 / F12 are already updated to fixed upstream version (1.24+), F9 and F10 are affected.
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=502582
zouxiaogang zxcd82@vip.sina.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |zxcd82@vip.sina.com
--- Comment #2 from zouxiaogang zxcd82@vip.sina.com 2009-05-29 23:03:12 EDT --- that F9 and F10 are updated,what time? pango-1.22.3-1.fc10.i386 (now)
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=502582
Vincent Danen vdanen@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED CC| |vdanen@redhat.com Resolution| |RAWHIDE
--- Comment #4 from Vincent Danen vdanen@redhat.com 2009-12-03 16:07:56 EDT --- This is fixed in Fedora 11 and 12, but is still unfixed in Fedora 10. Closing it; I doubt we'll see a fix for Fedora 10 at this point.
fonts-bugs@lists.fedoraproject.org