The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade aspell | Nov 27, 2019 | Oct 14, 2019 |
| Debian | — | Upgrade aspell | Oct 21, 2019 | Oct 14, 2019 |
| Oracle Solaris | — | Upgrade text/aspell to version 0.60.6.1-11.4.16.0.1.3.0 on Solaris 11.4Upgrade text/aspell/dictionary/en to version 0.60.6.1-11.4.16.0.1.3.0 on Solaris 11.4 | Dec 18, 2019 | Oct 14, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 14, 2019 |
| Suse | — | Upgrade aspellUpgrade aspell-ispellUpgrade libpspell15Upgrade libaspell15Upgrade aspell-develUpgrade libaspell15-32bit | Nov 22, 2019 | Oct 14, 2019 |
| Ubuntu | — | Upgrade libaspell15Upgrade aspellUpgrade aspell (Ubuntu Pro)Upgrade libaspell15 (Ubuntu Pro) | Oct 16, 2019 | Oct 14, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub