Summary
GNU Aspell is a spell checker designed to eventually replace Ispell. It can either be used as a library or as an independent spell checker.
Security Fix(es):
* aspell: aspell: Arbitrary code execution via crafted dictionary file (CVE-2026-103658)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | aspell | 12:0.60.8-9.el9_8 |
| AlmaLinux · 9 | aspell-devel | 12:0.60.8-9.el9_8 |
Vulnerabilities 1
-
Medium 5.9
GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in it…