红帽产品勘误 RHSA-2020:3971 - Security Advisory
发布：
2020-09-29
已更新：
2020-09-29

RHSA-2020:3971 - Security Advisory

概述

Low: hunspell security update

类型/严重性

Security Advisory: Low

Red Hat Insights 补丁分析

识别并修复受此公告影响的系统。

查看受影响的系统

标题

An update for hunspell is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

描述

Hunspell is a spell checker and morphological analyzer library and program designed for languages with rich morphology and complex word compounding or character encoding.

Security Fix(es):

  • hunspell: out-of-bounds read in SuggestMgr::leftcommonsubstring in suggestmgr.cxx (CVE-2019-16707)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.

解决方案

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

受影响的产品

  • Red Hat Enterprise Linux Server 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Workstation 7 x86_64
  • Red Hat Enterprise Linux Desktop 7 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 7 s390x
  • Red Hat Enterprise Linux for Power, big endian 7 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 7 x86_64
  • Red Hat Enterprise Linux for Power, little endian 7 ppc64le
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

修复

  • BZ - 1771026 - CVE-2019-16707 hunspell: out-of-bounds read in SuggestMgr::leftcommonsubstring in suggestmgr.cxx

Red Hat Enterprise Linux Server 7

SRPM
hunspell-1.3.2-16.el7.src.rpm SHA-256: 7a75ed734565b9eb2b9a6d9a93e435679be882bd57fe47e73d6f1ada56e52d34
x86_64
hunspell-1.3.2-16.el7.i686.rpm SHA-256: 918d5ebd9f82693dc689a198fac6a0f41cc9874ea965fa380363839308aaf055
hunspell-1.3.2-16.el7.x86_64.rpm SHA-256: ad851567ad8d5c79b1f26a98c77f67e5630790c8cd08bc58583a34dac023cd4b
hunspell-debuginfo-1.3.2-16.el7.i686.rpm SHA-256: 7ef3c739b86ac47ceec4b4527f5ebabedb9625d47833f756e9996a30736d40db
hunspell-debuginfo-1.3.2-16.el7.x86_64.rpm SHA-256: 250ee00f425a97038fc384c2ed2dfa1f90e8f1a81d723bf2782fa63e5502b2b4
hunspell-devel-1.3.2-16.el7.i686.rpm SHA-256: 20d7e72976cb55ee52c5a897421a33563f30c9ea726639688b69516f810f94e2
hunspell-devel-1.3.2-16.el7.x86_64.rpm SHA-256: 2a10b386419c9f668d482025bb3a464db6a9147f414e468f747e67a7217f960d

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
hunspell-1.3.2-16.el7.src.rpm SHA-256: 7a75ed734565b9eb2b9a6d9a93e435679be882bd57fe47e73d6f1ada56e52d34
x86_64
hunspell-1.3.2-16.el7.i686.rpm SHA-256: 918d5ebd9f82693dc689a198fac6a0f41cc9874ea965fa380363839308aaf055
hunspell-1.3.2-16.el7.x86_64.rpm SHA-256: ad851567ad8d5c79b1f26a98c77f67e5630790c8cd08bc58583a34dac023cd4b
hunspell-debuginfo-1.3.2-16.el7.i686.rpm SHA-256: 7ef3c739b86ac47ceec4b4527f5ebabedb9625d47833f756e9996a30736d40db
hunspell-debuginfo-1.3.2-16.el7.x86_64.rpm SHA-256: 250ee00f425a97038fc384c2ed2dfa1f90e8f1a81d723bf2782fa63e5502b2b4
hunspell-devel-1.3.2-16.el7.i686.rpm SHA-256: 20d7e72976cb55ee52c5a897421a33563f30c9ea726639688b69516f810f94e2
hunspell-devel-1.3.2-16.el7.x86_64.rpm SHA-256: 2a10b386419c9f668d482025bb3a464db6a9147f414e468f747e67a7217f960d

Red Hat Enterprise Linux Workstation 7

SRPM
hunspell-1.3.2-16.el7.src.rpm SHA-256: 7a75ed734565b9eb2b9a6d9a93e435679be882bd57fe47e73d6f1ada56e52d34
x86_64
hunspell-1.3.2-16.el7.i686.rpm SHA-256: 918d5ebd9f82693dc689a198fac6a0f41cc9874ea965fa380363839308aaf055
hunspell-1.3.2-16.el7.x86_64.rpm SHA-256: ad851567ad8d5c79b1f26a98c77f67e5630790c8cd08bc58583a34dac023cd4b
hunspell-debuginfo-1.3.2-16.el7.i686.rpm SHA-256: 7ef3c739b86ac47ceec4b4527f5ebabedb9625d47833f756e9996a30736d40db
hunspell-debuginfo-1.3.2-16.el7.x86_64.rpm SHA-256: 250ee00f425a97038fc384c2ed2dfa1f90e8f1a81d723bf2782fa63e5502b2b4
hunspell-devel-1.3.2-16.el7.i686.rpm SHA-256: 20d7e72976cb55ee52c5a897421a33563f30c9ea726639688b69516f810f94e2
hunspell-devel-1.3.2-16.el7.x86_64.rpm SHA-256: 2a10b386419c9f668d482025bb3a464db6a9147f414e468f747e67a7217f960d

Red Hat Enterprise Linux Desktop 7

SRPM
hunspell-1.3.2-16.el7.src.rpm SHA-256: 7a75ed734565b9eb2b9a6d9a93e435679be882bd57fe47e73d6f1ada56e52d34
x86_64
hunspell-1.3.2-16.el7.i686.rpm SHA-256: 918d5ebd9f82693dc689a198fac6a0f41cc9874ea965fa380363839308aaf055
hunspell-1.3.2-16.el7.x86_64.rpm SHA-256: ad851567ad8d5c79b1f26a98c77f67e5630790c8cd08bc58583a34dac023cd4b
hunspell-debuginfo-1.3.2-16.el7.i686.rpm SHA-256: 7ef3c739b86ac47ceec4b4527f5ebabedb9625d47833f756e9996a30736d40db
hunspell-debuginfo-1.3.2-16.el7.i686.rpm SHA-256: 7ef3c739b86ac47ceec4b4527f5ebabedb9625d47833f756e9996a30736d40db
hunspell-debuginfo-1.3.2-16.el7.x86_64.rpm SHA-256: 250ee00f425a97038fc384c2ed2dfa1f90e8f1a81d723bf2782fa63e5502b2b4
hunspell-debuginfo-1.3.2-16.el7.x86_64.rpm SHA-256: 250ee00f425a97038fc384c2ed2dfa1f90e8f1a81d723bf2782fa63e5502b2b4
hunspell-devel-1.3.2-16.el7.i686.rpm SHA-256: 20d7e72976cb55ee52c5a897421a33563f30c9ea726639688b69516f810f94e2
hunspell-devel-1.3.2-16.el7.x86_64.rpm SHA-256: 2a10b386419c9f668d482025bb3a464db6a9147f414e468f747e67a7217f960d

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
hunspell-1.3.2-16.el7.src.rpm SHA-256: 7a75ed734565b9eb2b9a6d9a93e435679be882bd57fe47e73d6f1ada56e52d34
s390x
hunspell-1.3.2-16.el7.s390.rpm SHA-256: 20756d319e3f3664dfffc5fdd4eaacd2cd1062e7f57b95d1dced9fa812219bf7
hunspell-1.3.2-16.el7.s390x.rpm SHA-256: 0acc968ead0fe64bf9e2f86ecc521f29d3871e16604c6cdbbe0f59706e0ddd16
hunspell-debuginfo-1.3.2-16.el7.s390.rpm SHA-256: 79c199929b379a3ea313d938786cac4d23369d97fd13c5eea26ab66cbb162d52
hunspell-debuginfo-1.3.2-16.el7.s390x.rpm SHA-256: 706b63749d349764fb8155253d19bcadd74ca38dac0a9547a43a785dcb052fe7
hunspell-devel-1.3.2-16.el7.s390.rpm SHA-256: 6f0b9d2e9cd40006939813f78b2e08516558f5d96af602c196ceb001da991e12
hunspell-devel-1.3.2-16.el7.s390x.rpm SHA-256: ca1b8f2e9cdc3b610c2a700e9b1c97a2c78098b1415174029696c15ddbf83b94

Red Hat Enterprise Linux for Power, big endian 7

SRPM
hunspell-1.3.2-16.el7.src.rpm SHA-256: 7a75ed734565b9eb2b9a6d9a93e435679be882bd57fe47e73d6f1ada56e52d34
ppc64
hunspell-1.3.2-16.el7.ppc.rpm SHA-256: 18338e83e6ef5e393966ceebadeb0e482236cc65c5da4b8209a43da15345932b
hunspell-1.3.2-16.el7.ppc64.rpm SHA-256: ad6706614c865f74854054dbcc6df5408315208d711a702323db26ba93103839
hunspell-debuginfo-1.3.2-16.el7.ppc.rpm SHA-256: 4e3ca20a87fd0a88fe568c134936c31a0e3259b45c8663d41d8eaf3f4ad18574
hunspell-debuginfo-1.3.2-16.el7.ppc64.rpm SHA-256: ef0bf3acb06b97aabfab6653d6eafc4546050d4df2e206523981c877aa04af5e
hunspell-devel-1.3.2-16.el7.ppc.rpm SHA-256: 87216405b20ac58b9c309b13e77ca9678275f509ab0907727055f85355dd6c4a
hunspell-devel-1.3.2-16.el7.ppc64.rpm SHA-256: a832a36406dc20177bc8fd099be3574438097a4eb2c300f9ce26277f4a7bba2e

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
hunspell-1.3.2-16.el7.src.rpm SHA-256: 7a75ed734565b9eb2b9a6d9a93e435679be882bd57fe47e73d6f1ada56e52d34
x86_64
hunspell-1.3.2-16.el7.i686.rpm SHA-256: 918d5ebd9f82693dc689a198fac6a0f41cc9874ea965fa380363839308aaf055
hunspell-1.3.2-16.el7.x86_64.rpm SHA-256: ad851567ad8d5c79b1f26a98c77f67e5630790c8cd08bc58583a34dac023cd4b
hunspell-debuginfo-1.3.2-16.el7.i686.rpm SHA-256: 7ef3c739b86ac47ceec4b4527f5ebabedb9625d47833f756e9996a30736d40db
hunspell-debuginfo-1.3.2-16.el7.i686.rpm SHA-256: 7ef3c739b86ac47ceec4b4527f5ebabedb9625d47833f756e9996a30736d40db
hunspell-debuginfo-1.3.2-16.el7.x86_64.rpm SHA-256: 250ee00f425a97038fc384c2ed2dfa1f90e8f1a81d723bf2782fa63e5502b2b4
hunspell-debuginfo-1.3.2-16.el7.x86_64.rpm SHA-256: 250ee00f425a97038fc384c2ed2dfa1f90e8f1a81d723bf2782fa63e5502b2b4
hunspell-devel-1.3.2-16.el7.i686.rpm SHA-256: 20d7e72976cb55ee52c5a897421a33563f30c9ea726639688b69516f810f94e2
hunspell-devel-1.3.2-16.el7.x86_64.rpm SHA-256: 2a10b386419c9f668d482025bb3a464db6a9147f414e468f747e67a7217f960d

Red Hat Enterprise Linux for Power, little endian 7

SRPM
hunspell-1.3.2-16.el7.src.rpm SHA-256: 7a75ed734565b9eb2b9a6d9a93e435679be882bd57fe47e73d6f1ada56e52d34
ppc64le
hunspell-1.3.2-16.el7.ppc64le.rpm SHA-256: 0a3c55887adff1fd78dcece4c245ff582218e0a11b77452db248345fb89383ab
hunspell-debuginfo-1.3.2-16.el7.ppc64le.rpm SHA-256: 1450353cf98dcdcd24def2815cb8278780ebedd710381518d2e2fea589e1f24a
hunspell-devel-1.3.2-16.el7.ppc64le.rpm SHA-256: 12dfc211a19f645df9598ca2988d60bd3fce8a7389d88a025e20fc6ca57db94d

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
hunspell-1.3.2-16.el7.src.rpm SHA-256: 7a75ed734565b9eb2b9a6d9a93e435679be882bd57fe47e73d6f1ada56e52d34
s390x
hunspell-1.3.2-16.el7.s390.rpm SHA-256: 20756d319e3f3664dfffc5fdd4eaacd2cd1062e7f57b95d1dced9fa812219bf7
hunspell-1.3.2-16.el7.s390x.rpm SHA-256: 0acc968ead0fe64bf9e2f86ecc521f29d3871e16604c6cdbbe0f59706e0ddd16
hunspell-debuginfo-1.3.2-16.el7.s390.rpm SHA-256: 79c199929b379a3ea313d938786cac4d23369d97fd13c5eea26ab66cbb162d52
hunspell-debuginfo-1.3.2-16.el7.s390x.rpm SHA-256: 706b63749d349764fb8155253d19bcadd74ca38dac0a9547a43a785dcb052fe7
hunspell-devel-1.3.2-16.el7.s390.rpm SHA-256: 6f0b9d2e9cd40006939813f78b2e08516558f5d96af602c196ceb001da991e12
hunspell-devel-1.3.2-16.el7.s390x.rpm SHA-256: ca1b8f2e9cdc3b610c2a700e9b1c97a2c78098b1415174029696c15ddbf83b94

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
hunspell-1.3.2-16.el7.src.rpm SHA-256: 7a75ed734565b9eb2b9a6d9a93e435679be882bd57fe47e73d6f1ada56e52d34
ppc64
hunspell-1.3.2-16.el7.ppc.rpm SHA-256: 18338e83e6ef5e393966ceebadeb0e482236cc65c5da4b8209a43da15345932b
hunspell-1.3.2-16.el7.ppc64.rpm SHA-256: ad6706614c865f74854054dbcc6df5408315208d711a702323db26ba93103839
hunspell-debuginfo-1.3.2-16.el7.ppc.rpm SHA-256: 4e3ca20a87fd0a88fe568c134936c31a0e3259b45c8663d41d8eaf3f4ad18574
hunspell-debuginfo-1.3.2-16.el7.ppc64.rpm SHA-256: ef0bf3acb06b97aabfab6653d6eafc4546050d4df2e206523981c877aa04af5e
hunspell-devel-1.3.2-16.el7.ppc.rpm SHA-256: 87216405b20ac58b9c309b13e77ca9678275f509ab0907727055f85355dd6c4a
hunspell-devel-1.3.2-16.el7.ppc64.rpm SHA-256: a832a36406dc20177bc8fd099be3574438097a4eb2c300f9ce26277f4a7bba2e

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
hunspell-1.3.2-16.el7.src.rpm SHA-256: 7a75ed734565b9eb2b9a6d9a93e435679be882bd57fe47e73d6f1ada56e52d34
ppc64le
hunspell-1.3.2-16.el7.ppc64le.rpm SHA-256: 0a3c55887adff1fd78dcece4c245ff582218e0a11b77452db248345fb89383ab
hunspell-debuginfo-1.3.2-16.el7.ppc64le.rpm SHA-256: 1450353cf98dcdcd24def2815cb8278780ebedd710381518d2e2fea589e1f24a
hunspell-devel-1.3.2-16.el7.ppc64le.rpm SHA-256: 12dfc211a19f645df9598ca2988d60bd3fce8a7389d88a025e20fc6ca57db94d

Red Hat 安全团队联络方式为 secalert@redhat.com。 更多联络细节请参考 https://access.redhat.com/security/team/contact/。