[CLSA-2026:1792620157] Fix CVE(s): CVE-2026-103658
Type:
security
Severity:
Important
Release date:
2026-10-21 22:02:48 UTC
Description:
* SECURITY UPDATE: heap buffer overflow in the read-only dictionary loader via an oversized .rws header size field - debian/patches/CVE-2026-103658.patch: compare the requested size as size_t in String::reserve() in common/string.hpp - CVE-2026-103658
CVEs fixed:
Updated packages:
  • aspell_0.60.8-3+tuxcare.els1_amd64.deb
    sha:15829ca916206427f5ccf35427f436a69afb17f0
  • aspell-doc_0.60.8-3+tuxcare.els1_all.deb
    sha:d9a9f810f710f2689c48f214214b8352a5a73c68
  • libaspell-dev_0.60.8-3+tuxcare.els1_amd64.deb
    sha:5b86ca919cbfd240f3018b33499e06790063f5b1
  • libaspell15_0.60.8-3+tuxcare.els1_amd64.deb
    sha:63b003ecb8deb6465b38399623ee3a8a816f4835
  • libpspell-dev_0.60.8-3+tuxcare.els1_amd64.deb
    sha:0d1be720db6217260e656d93a084d80efed70b71
  • aspell_0.60.8-3+tuxcare.els1_arm64.deb
    sha:bfd540c347cf3eb1761c1bd2a93822739fad4636
  • libaspell-dev_0.60.8-3+tuxcare.els1_arm64.deb
    sha:5ec29e1eb2d0e9d3d76db51294c3888bd556275c
  • libaspell15_0.60.8-3+tuxcare.els1_arm64.deb
    sha:0bfa264f6489a0bf2de9ab10a8b55ee2154dd2f5
  • libpspell-dev_0.60.8-3+tuxcare.els1_arm64.deb
    sha:ff424514a10f7537bae1219c6dd0a401dae8aff0
  • aspell_0.60.8-3+tuxcare.els1_armel.deb
    sha:b571bc3fee339803881b01fd85d9656f0e792a66
  • libaspell-dev_0.60.8-3+tuxcare.els1_armel.deb
    sha:60d3aeabd2eebf222d799a7ce0578b0276f20588
  • libaspell15_0.60.8-3+tuxcare.els1_armel.deb
    sha:f6744d6bc50ff2f648f0a1a4e4f8d775d9023194
  • libpspell-dev_0.60.8-3+tuxcare.els1_armel.deb
    sha:6c9e1d2b81dd4a4c47273ea5859d451e6a2416cd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.