OESA-2024-1754

Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1754
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2024-1754.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2024-1754
Upstream
Published
2024-06-28T11:08:20Z
Modified
2025-08-12T05:34:33.146718Z
Summary
aspell security update
Details

GNU Aspell is a spell checker intended to replace Ispell. It can be used as a library and spell checker. Its main feature is that it provides much better suggestions than other inspectors, including Ispell and Microsoft Word. It also has many other technical enhancements to Ispell, such as the use of shared memory to store dictionaries, and intelligent processing of personal dictionaries when multiple Aspell processes are opened at one time.

Security Fix(es):

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop (called from acommon::StringMap::add and acommon::Config::lookuplist).(CVE-2019-25051)

Database specific
{
    "severity": "High"
}
References

Affected packages

openEuler:22.03-LTS-SP3 / aspell

Package

Name
aspell
Purl
pkg:rpm/openEuler/aspell&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.60.6.1-30.oe2203sp3

Ecosystem specific

{
    "src": [
        "aspell-0.60.6.1-30.oe2203sp3.src.rpm"
    ],
    "aarch64": [
        "aspell-debuginfo-0.60.6.1-30.oe2203sp3.aarch64.rpm",
        "aspell-debugsource-0.60.6.1-30.oe2203sp3.aarch64.rpm",
        "aspell-devel-0.60.6.1-30.oe2203sp3.aarch64.rpm",
        "aspell-help-0.60.6.1-30.oe2203sp3.aarch64.rpm",
        "aspell-0.60.6.1-30.oe2203sp3.aarch64.rpm"
    ],
    "x86_64": [
        "aspell-debuginfo-0.60.6.1-30.oe2203sp3.x86_64.rpm",
        "aspell-help-0.60.6.1-30.oe2203sp3.x86_64.rpm",
        "aspell-0.60.6.1-30.oe2203sp3.x86_64.rpm",
        "aspell-debugsource-0.60.6.1-30.oe2203sp3.x86_64.rpm",
        "aspell-devel-0.60.6.1-30.oe2203sp3.x86_64.rpm"
    ]
}