Red Hat Product Errata RHSA-2019:3234 - Security Advisory
Issued:
2019-10-29
Updated:
2019-10-29

RHSA-2019:3234 - Security Advisory

Synopsis

Important: pango security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for pango is now available for Red Hat Enterprise Linux 7.6 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Pango is a library for laying out and rendering of text, with an emphasis on internationalization. Pango forms the core of text and font handling for the GTK+ widget toolkit.

Security Fix(es):

  • pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow (CVE-2019-1010238)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 7.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6 ppc64le
  • Red Hat Enterprise Linux Server - TUS 7.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 7 aarch64
  • Red Hat Enterprise Linux for Power 9 7 ppc64le
  • Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
  • Red Hat Enterprise Linux for IBM System z (Structure A) 7 s390x

Fixes

  • BZ - 1737785 - CVE-2019-1010238 pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow

Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6

SRPM
pango-1.42.4-3.el7_6.src.rpm SHA-256: 6d33caa3ec4abcdc30c2432e1eb2625b35ab57dc0aca76d5fb75e1281375c2b2
x86_64
pango-1.42.4-3.el7_6.i686.rpm SHA-256: 878d99a8c98bbd7f05cfb7f0b90ef1065b1ece059a9b8dab9e8ea091f8a48148
pango-1.42.4-3.el7_6.x86_64.rpm SHA-256: 65694d25a9edf5eea8ff7c71e02ab1cb57588ba8a770dede848a1229fb9a6b8f
pango-debuginfo-1.42.4-3.el7_6.i686.rpm SHA-256: dfa8c97d3eb582bc91f54b702f43bd7088ff373ee0f94f5b73178c37ee8b6011
pango-debuginfo-1.42.4-3.el7_6.x86_64.rpm SHA-256: 35cb941bcd12fff09bb2735949a253de0e06194a031dd6548569dade22534c69
pango-debuginfo-1.42.4-3.el7_6.x86_64.rpm SHA-256: 35cb941bcd12fff09bb2735949a253de0e06194a031dd6548569dade22534c69
pango-devel-1.42.4-3.el7_6.i686.rpm SHA-256: 45cb81468dde02a6425958fcd80257148105aad0cfa040f9ba2c90156b405671
pango-devel-1.42.4-3.el7_6.x86_64.rpm SHA-256: e7546395614a80132776f676372c611691fce5e89007bc16eab1fe5a2031d6e5
pango-tests-1.42.4-3.el7_6.x86_64.rpm SHA-256: 6668374f23e1273d14538ec48d050a2a4aa1454ed643a11da9669ead0e62df64

Red Hat Enterprise Linux Server - AUS 7.6

SRPM
pango-1.42.4-3.el7_6.src.rpm SHA-256: 6d33caa3ec4abcdc30c2432e1eb2625b35ab57dc0aca76d5fb75e1281375c2b2
x86_64
pango-1.42.4-3.el7_6.i686.rpm SHA-256: 878d99a8c98bbd7f05cfb7f0b90ef1065b1ece059a9b8dab9e8ea091f8a48148
pango-1.42.4-3.el7_6.x86_64.rpm SHA-256: 65694d25a9edf5eea8ff7c71e02ab1cb57588ba8a770dede848a1229fb9a6b8f
pango-debuginfo-1.42.4-3.el7_6.i686.rpm SHA-256: dfa8c97d3eb582bc91f54b702f43bd7088ff373ee0f94f5b73178c37ee8b6011
pango-debuginfo-1.42.4-3.el7_6.x86_64.rpm SHA-256: 35cb941bcd12fff09bb2735949a253de0e06194a031dd6548569dade22534c69
pango-debuginfo-1.42.4-3.el7_6.x86_64.rpm SHA-256: 35cb941bcd12fff09bb2735949a253de0e06194a031dd6548569dade22534c69
pango-devel-1.42.4-3.el7_6.i686.rpm SHA-256: 45cb81468dde02a6425958fcd80257148105aad0cfa040f9ba2c90156b405671
pango-devel-1.42.4-3.el7_6.x86_64.rpm SHA-256: e7546395614a80132776f676372c611691fce5e89007bc16eab1fe5a2031d6e5
pango-tests-1.42.4-3.el7_6.x86_64.rpm SHA-256: 6668374f23e1273d14538ec48d050a2a4aa1454ed643a11da9669ead0e62df64

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6

SRPM
pango-1.42.4-3.el7_6.src.rpm SHA-256: 6d33caa3ec4abcdc30c2432e1eb2625b35ab57dc0aca76d5fb75e1281375c2b2
s390x
pango-1.42.4-3.el7_6.s390.rpm SHA-256: baef87b2ed59459fe45ac385510258846973bc124bcd8e6bf719c261cafc65d7
pango-1.42.4-3.el7_6.s390x.rpm SHA-256: 00e95620910f7bdaf216162162795a12c8d278d0614216e0f4f2c465dcbbc55e
pango-debuginfo-1.42.4-3.el7_6.s390.rpm SHA-256: 98423182bf95fc07c656c2faca66694b87398563dc2f6bc7b3b6566b537e0b8b
pango-debuginfo-1.42.4-3.el7_6.s390x.rpm SHA-256: 811649a78062dc15d057de8ba66cf4eb8552c41ec68af40d1e1eac24760c1eca
pango-debuginfo-1.42.4-3.el7_6.s390x.rpm SHA-256: 811649a78062dc15d057de8ba66cf4eb8552c41ec68af40d1e1eac24760c1eca
pango-devel-1.42.4-3.el7_6.s390.rpm SHA-256: c31be0869085e9f7957fa9bfbfb2b2395589ac7fde3a4496248daf5f21560617
pango-devel-1.42.4-3.el7_6.s390x.rpm SHA-256: 64d8987ac0bc695d4b57cacd84b4e5a28042610d78e694822f2d281b66b76608
pango-tests-1.42.4-3.el7_6.s390x.rpm SHA-256: fa7a5303db3926705ef5c604ee60d8144a1510b6222f7e370a7b37d43234dc47

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6

SRPM
pango-1.42.4-3.el7_6.src.rpm SHA-256: 6d33caa3ec4abcdc30c2432e1eb2625b35ab57dc0aca76d5fb75e1281375c2b2
ppc64
pango-1.42.4-3.el7_6.ppc.rpm SHA-256: 9d0855e845e1739bf17fd03711ef015cc3f3df328d79553716033a69229b5b6f
pango-1.42.4-3.el7_6.ppc64.rpm SHA-256: a4a71f3fadb0749a906c879beddc445f1bd4ebe1be54e87eb239c18664507787
pango-debuginfo-1.42.4-3.el7_6.ppc.rpm SHA-256: f953f41c615bca9cbd8703be6d75b31619d514abf226ef37069d2ca8a79f3f3e
pango-debuginfo-1.42.4-3.el7_6.ppc64.rpm SHA-256: 30d8330fe143a152858f78b27058a0e18d6971c7c5741bed742344f27ebe81b8
pango-debuginfo-1.42.4-3.el7_6.ppc64.rpm SHA-256: 30d8330fe143a152858f78b27058a0e18d6971c7c5741bed742344f27ebe81b8
pango-devel-1.42.4-3.el7_6.ppc.rpm SHA-256: 0585192986646dd9a54b8b14084241477498a99fa062a11c2530f77bbd64c381
pango-devel-1.42.4-3.el7_6.ppc64.rpm SHA-256: 617eeaafa97fa628959bcb6eeed783ec1cc03c6f7173f6f5cdfd292df91f1f2d
pango-tests-1.42.4-3.el7_6.ppc64.rpm SHA-256: 116724fd7ed4b1fe906cf53788fffb70f9f0e7257d2c765c78f212978882b2c5

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6

SRPM
pango-1.42.4-3.el7_6.src.rpm SHA-256: 6d33caa3ec4abcdc30c2432e1eb2625b35ab57dc0aca76d5fb75e1281375c2b2
ppc64le
pango-1.42.4-3.el7_6.ppc64le.rpm SHA-256: 248e8114d1939679cdab37efe0d6d17048f1d3174d36e41e6049dde747887953
pango-debuginfo-1.42.4-3.el7_6.ppc64le.rpm SHA-256: 68bc2f35f76555b528b7ef16de1e574c374bcab685dd4f7d5a92b5e1615bc739
pango-debuginfo-1.42.4-3.el7_6.ppc64le.rpm SHA-256: 68bc2f35f76555b528b7ef16de1e574c374bcab685dd4f7d5a92b5e1615bc739
pango-devel-1.42.4-3.el7_6.ppc64le.rpm SHA-256: 9fa5da695756213d038e9ef502e888f3bc177d425cb7b10e4a71e4663f91633e
pango-tests-1.42.4-3.el7_6.ppc64le.rpm SHA-256: 57d7c8425f890def5995e5f59650464e3c7a5d122463475badbac0c41282e007

Red Hat Enterprise Linux Server - TUS 7.6

SRPM
pango-1.42.4-3.el7_6.src.rpm SHA-256: 6d33caa3ec4abcdc30c2432e1eb2625b35ab57dc0aca76d5fb75e1281375c2b2
x86_64
pango-1.42.4-3.el7_6.i686.rpm SHA-256: 878d99a8c98bbd7f05cfb7f0b90ef1065b1ece059a9b8dab9e8ea091f8a48148
pango-1.42.4-3.el7_6.x86_64.rpm SHA-256: 65694d25a9edf5eea8ff7c71e02ab1cb57588ba8a770dede848a1229fb9a6b8f
pango-debuginfo-1.42.4-3.el7_6.i686.rpm SHA-256: dfa8c97d3eb582bc91f54b702f43bd7088ff373ee0f94f5b73178c37ee8b6011
pango-debuginfo-1.42.4-3.el7_6.x86_64.rpm SHA-256: 35cb941bcd12fff09bb2735949a253de0e06194a031dd6548569dade22534c69
pango-debuginfo-1.42.4-3.el7_6.x86_64.rpm SHA-256: 35cb941bcd12fff09bb2735949a253de0e06194a031dd6548569dade22534c69
pango-devel-1.42.4-3.el7_6.i686.rpm SHA-256: 45cb81468dde02a6425958fcd80257148105aad0cfa040f9ba2c90156b405671
pango-devel-1.42.4-3.el7_6.x86_64.rpm SHA-256: e7546395614a80132776f676372c611691fce5e89007bc16eab1fe5a2031d6e5
pango-tests-1.42.4-3.el7_6.x86_64.rpm SHA-256: 6668374f23e1273d14538ec48d050a2a4aa1454ed643a11da9669ead0e62df64

Red Hat Enterprise Linux for ARM 64 7

SRPM
pango-1.42.4-3.el7_6.src.rpm SHA-256: 6d33caa3ec4abcdc30c2432e1eb2625b35ab57dc0aca76d5fb75e1281375c2b2
aarch64
pango-1.42.4-3.el7_6.aarch64.rpm SHA-256: 9b5fedfcc7ad81a3d07ba97aee72a195cae5f8f6573a52f050a1de89898a5f65
pango-debuginfo-1.42.4-3.el7_6.aarch64.rpm SHA-256: 92fdb72fedef29f44ee8da51db857b44a484914b82053f440f6887cc5d5adbe7
pango-debuginfo-1.42.4-3.el7_6.aarch64.rpm SHA-256: 92fdb72fedef29f44ee8da51db857b44a484914b82053f440f6887cc5d5adbe7
pango-devel-1.42.4-3.el7_6.aarch64.rpm SHA-256: c7394d6bc9c219e033ba87cd8b53da62825877b6de2019454a7aeb056b9142f2
pango-tests-1.42.4-3.el7_6.aarch64.rpm SHA-256: 8fc685b9475d8b01c25a45fa790c2d31f658dbbc09cf922f439af5dcc5153c92

Red Hat Enterprise Linux for Power 9 7

SRPM
pango-1.42.4-3.el7_6.src.rpm SHA-256: 6d33caa3ec4abcdc30c2432e1eb2625b35ab57dc0aca76d5fb75e1281375c2b2
ppc64le
pango-1.42.4-3.el7_6.ppc64le.rpm SHA-256: 248e8114d1939679cdab37efe0d6d17048f1d3174d36e41e6049dde747887953
pango-debuginfo-1.42.4-3.el7_6.ppc64le.rpm SHA-256: 68bc2f35f76555b528b7ef16de1e574c374bcab685dd4f7d5a92b5e1615bc739
pango-debuginfo-1.42.4-3.el7_6.ppc64le.rpm SHA-256: 68bc2f35f76555b528b7ef16de1e574c374bcab685dd4f7d5a92b5e1615bc739
pango-devel-1.42.4-3.el7_6.ppc64le.rpm SHA-256: 9fa5da695756213d038e9ef502e888f3bc177d425cb7b10e4a71e4663f91633e
pango-tests-1.42.4-3.el7_6.ppc64le.rpm SHA-256: 57d7c8425f890def5995e5f59650464e3c7a5d122463475badbac0c41282e007

Red Hat Enterprise Linux EUS Compute Node 7.6

SRPM
pango-1.42.4-3.el7_6.src.rpm SHA-256: 6d33caa3ec4abcdc30c2432e1eb2625b35ab57dc0aca76d5fb75e1281375c2b2
x86_64
pango-1.42.4-3.el7_6.i686.rpm SHA-256: 878d99a8c98bbd7f05cfb7f0b90ef1065b1ece059a9b8dab9e8ea091f8a48148
pango-1.42.4-3.el7_6.x86_64.rpm SHA-256: 65694d25a9edf5eea8ff7c71e02ab1cb57588ba8a770dede848a1229fb9a6b8f
pango-debuginfo-1.42.4-3.el7_6.i686.rpm SHA-256: dfa8c97d3eb582bc91f54b702f43bd7088ff373ee0f94f5b73178c37ee8b6011
pango-debuginfo-1.42.4-3.el7_6.i686.rpm SHA-256: dfa8c97d3eb582bc91f54b702f43bd7088ff373ee0f94f5b73178c37ee8b6011
pango-debuginfo-1.42.4-3.el7_6.x86_64.rpm SHA-256: 35cb941bcd12fff09bb2735949a253de0e06194a031dd6548569dade22534c69
pango-debuginfo-1.42.4-3.el7_6.x86_64.rpm SHA-256: 35cb941bcd12fff09bb2735949a253de0e06194a031dd6548569dade22534c69
pango-devel-1.42.4-3.el7_6.i686.rpm SHA-256: 45cb81468dde02a6425958fcd80257148105aad0cfa040f9ba2c90156b405671
pango-devel-1.42.4-3.el7_6.x86_64.rpm SHA-256: e7546395614a80132776f676372c611691fce5e89007bc16eab1fe5a2031d6e5
pango-tests-1.42.4-3.el7_6.x86_64.rpm SHA-256: 6668374f23e1273d14538ec48d050a2a4aa1454ed643a11da9669ead0e62df64

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.6

SRPM
pango-1.42.4-3.el7_6.src.rpm SHA-256: 6d33caa3ec4abcdc30c2432e1eb2625b35ab57dc0aca76d5fb75e1281375c2b2
ppc64le
pango-1.42.4-3.el7_6.ppc64le.rpm SHA-256: 248e8114d1939679cdab37efe0d6d17048f1d3174d36e41e6049dde747887953
pango-debuginfo-1.42.4-3.el7_6.ppc64le.rpm SHA-256: 68bc2f35f76555b528b7ef16de1e574c374bcab685dd4f7d5a92b5e1615bc739
pango-debuginfo-1.42.4-3.el7_6.ppc64le.rpm SHA-256: 68bc2f35f76555b528b7ef16de1e574c374bcab685dd4f7d5a92b5e1615bc739
pango-devel-1.42.4-3.el7_6.ppc64le.rpm SHA-256: 9fa5da695756213d038e9ef502e888f3bc177d425cb7b10e4a71e4663f91633e
pango-tests-1.42.4-3.el7_6.ppc64le.rpm SHA-256: 57d7c8425f890def5995e5f59650464e3c7a5d122463475badbac0c41282e007

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6

SRPM
pango-1.42.4-3.el7_6.src.rpm SHA-256: 6d33caa3ec4abcdc30c2432e1eb2625b35ab57dc0aca76d5fb75e1281375c2b2
x86_64
pango-1.42.4-3.el7_6.i686.rpm SHA-256: 878d99a8c98bbd7f05cfb7f0b90ef1065b1ece059a9b8dab9e8ea091f8a48148
pango-1.42.4-3.el7_6.x86_64.rpm SHA-256: 65694d25a9edf5eea8ff7c71e02ab1cb57588ba8a770dede848a1229fb9a6b8f
pango-debuginfo-1.42.4-3.el7_6.i686.rpm SHA-256: dfa8c97d3eb582bc91f54b702f43bd7088ff373ee0f94f5b73178c37ee8b6011
pango-debuginfo-1.42.4-3.el7_6.x86_64.rpm SHA-256: 35cb941bcd12fff09bb2735949a253de0e06194a031dd6548569dade22534c69
pango-debuginfo-1.42.4-3.el7_6.x86_64.rpm SHA-256: 35cb941bcd12fff09bb2735949a253de0e06194a031dd6548569dade22534c69
pango-devel-1.42.4-3.el7_6.i686.rpm SHA-256: 45cb81468dde02a6425958fcd80257148105aad0cfa040f9ba2c90156b405671
pango-devel-1.42.4-3.el7_6.x86_64.rpm SHA-256: e7546395614a80132776f676372c611691fce5e89007bc16eab1fe5a2031d6e5
pango-tests-1.42.4-3.el7_6.x86_64.rpm SHA-256: 6668374f23e1273d14538ec48d050a2a4aa1454ed643a11da9669ead0e62df64

Red Hat Enterprise Linux for IBM System z (Structure A) 7

SRPM
pango-1.42.4-3.el7_6.src.rpm SHA-256: 6d33caa3ec4abcdc30c2432e1eb2625b35ab57dc0aca76d5fb75e1281375c2b2
s390x
pango-1.42.4-3.el7_6.s390.rpm SHA-256: baef87b2ed59459fe45ac385510258846973bc124bcd8e6bf719c261cafc65d7
pango-1.42.4-3.el7_6.s390x.rpm SHA-256: 00e95620910f7bdaf216162162795a12c8d278d0614216e0f4f2c465dcbbc55e
pango-debuginfo-1.42.4-3.el7_6.s390.rpm SHA-256: 98423182bf95fc07c656c2faca66694b87398563dc2f6bc7b3b6566b537e0b8b
pango-debuginfo-1.42.4-3.el7_6.s390x.rpm SHA-256: 811649a78062dc15d057de8ba66cf4eb8552c41ec68af40d1e1eac24760c1eca
pango-debuginfo-1.42.4-3.el7_6.s390x.rpm SHA-256: 811649a78062dc15d057de8ba66cf4eb8552c41ec68af40d1e1eac24760c1eca
pango-devel-1.42.4-3.el7_6.s390.rpm SHA-256: c31be0869085e9f7957fa9bfbfb2b2395589ac7fde3a4496248daf5f21560617
pango-devel-1.42.4-3.el7_6.s390x.rpm SHA-256: 64d8987ac0bc695d4b57cacd84b4e5a28042610d78e694822f2d281b66b76608
pango-tests-1.42.4-3.el7_6.s390x.rpm SHA-256: fa7a5303db3926705ef5c604ee60d8144a1510b6222f7e370a7b37d43234dc47

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.