Multiple vulnerabilities have been discovered in Hunspell, the worst of which could lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-text/hunspell | * | < 1.7.1 | >= 1.7.1 |
Hunspell is the spell checker of LibreOffice, OpenOffice.org, Mozilla Firefox & Thunderbird, Google Chrome.
Malicious input to the hunspell spell checker could result in an application crash or other unspecified behavior.
Malicious input to the hunspell spell checker could result in an application crash or other unspecified behavior.
There is no known workaround at this time.
All Hunspell users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-text/hunspell-1.7.1"