Debian Security Advisory DSA 4496-1 (pango1.0 - security update)

The remote host is missing an update for the 'pango1.0' package(s) announced via the DSA-4496-1 advisory.

Benno Fuenfstueck discovered that Pango, a library for layout and rendering of text with an emphasis on internationalization, is prone to a heap-based buffer overflow flaw in the pango_log2vis_get_embedding_levels function. An attacker can take advantage of this flaw for denial of service or potentially the execution of arbitrary code.

'pango1.0' package(s) on Debian Linux.

Checks if a vulnerable package version is present on the target host.

For the stable distribution (buster), this problem has been fixed in version 1.42.4-7~deb10u1. We recommend that you upgrade your pango1.0 packages.