Summary
GNU Aspell is a spell checker designed to eventually replace Ispell. It can either be used as a library or as an independent spell checker.
Security Fix(es):
* aspell: aspell: Arbitrary code execution via crafted dictionary file (CVE-2026-103658)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 10 | aspell | 2:0.60.8.1-3.el10_3.1 |
| Rocky Linux · 10 | aspell | 2:0.60.8.1-3.el10_3.1 |
| Rocky Linux · 10 | aspell | 2:0.60.8.1-3.el10_3.1 |
| Rocky Linux · 10 | aspell | 2:0.60.8.1-3.el10_3.1 |
| Rocky Linux · 10 | aspell-debuginfo | 2:0.60.8.1-3.el10_3.1 |
| Rocky Linux · 10 | aspell-debuginfo | 2:0.60.8.1-3.el10_3.1 |
| Rocky Linux · 10 | aspell-debuginfo | 2:0.60.8.1-3.el10_3.1 |
| Rocky Linux · 10 | aspell-debuginfo | 2:0.60.8.1-3.el10_3.1 |
| Rocky Linux · 10 | aspell-debugsource | 2:0.60.8.1-3.el10_3.1 |
| Rocky Linux · 10 | aspell-debugsource | 2:0.60.8.1-3.el10_3.1 |
| Rocky Linux · 10 | aspell-debugsource | 2:0.60.8.1-3.el10_3.1 |
| Rocky Linux · 10 | aspell-debugsource | 2:0.60.8.1-3.el10_3.1 |
| Rocky Linux · 10 | aspell-devel | 2:0.60.8.1-3.el10_3.1 |
| Rocky Linux · 10 | aspell-devel | 2:0.60.8.1-3.el10_3.1 |
| Rocky Linux · 10 | aspell-devel | 2:0.60.8.1-3.el10_3.1 |
| Rocky Linux · 10 | aspell-devel | 2:0.60.8.1-3.el10_3.1 |
Vulnerabilities 1
-
Medium 5.9
GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in it…