Gentoo Linux Security Advisory GLSA 200606-01 – SEC Consult has discovered a buffer overflow in the code processing style sheet attributes. It is caused by an integer signedness error in a length check followed by a call to a string function. It seems to be hard to exploit this buffer overflow to execute arbitrary code because of the very large amount memory that has to be copied. Versions less than 8.54 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/47169/glsa-200606-01.txt
Source: https://packetstormsecurity.com/files/47169/Gentoo-Linux-Security-Advisory-200606-1.html