caracal

Caracal Caracal es una herramienta de análisis estático sobre la representación SIERRA para contratos inteligentes de Starknet. Características Detectores para detectar código Cairo vulnerable Impresoras para reportar información Análisis de taint Marco de análisis de flujo de datos Fácil de...

caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

CVE-2025-50422

Poppler antes de la versión 25.04.0 Cuando pdftocairo renderiza un PDF malicioso y llama a cairodebugresetstaticdata al finalizar, la memoria del heap que contiene los flujos de objetos del PDF no se limpia correctamente. Un atacante con acceso local puede volcar la memoria del proceso y recupera...

[SECURITY] Fedora 45 Update: lasem-0.6.0-6.fc45

Lasem is a library for rendering SVG and Mathml, implementing a DOM like API. It's based on GObject and use Pango and Cairo for the rendering...

[SECURITY] Fedora 45 Update: cairo-dock-plug-ins-3.6.2-9.fc45

This package is a meta package for Cairo-Dock plugins...

[SECURITY] Fedora 45 Update: cairo-dock-3.6.2-5.fc45

This is a metapackage for installing all default packages related to cairo-dock...

Rocky Linux 8.6 [CIQ] Security Update: python2-cairo / python2-cairo-debuginfo / python2-cairo-devel / etc Multiple Vulnerabilities (ciqsa-2026_0160)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260160 advisory. This advisory aggregates security fixes for the python2-pycairo SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2023-44442, CVE-2023-44444. Tenable has...

Astra Linux – Vulnerability in Cairo

A flaw was discovered in cairo’s image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo’s image-compositor for example, by convincing a user to open a file in an application that uses cairo, or if an application uses cairo on...

Astra Linux – Vulnerability in Firefox

A use-after-free vulnerability was identified during testing, and it was traced to an outdated Cairo library. Updating the library resolved the issue, and it may have also addressed other unknown security vulnerabilities. This vulnerability affects Firefox versions earlier than 90...

CVE-2026-57583: Improper Control of Generation of Code

OpenZeppelin Contracts Wizard is a web application to interactively build a contract out of components from OpenZeppelin Contracts. Prior to @openzeppelin/wizard 0.10.11, @openzeppelin/wizard-cairo 3.0.1, @openzeppelin/wizard-stellar 0.6.2, and @openzeppelin/wizard-stylus 0.3.1, the setInfo code...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cairo (UTSA-2026-093027)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093027 advisory. cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: cairo (UTSA-2026-043397)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-043397 advisory. A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo's...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cairo (UTSA-2026-093029)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093029 advisory. An issue was discovered in cairo 1.16.0. There is an infinite loop in the function arcerrornormalized in the file cairo-arc.c, related to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cairo (UTSA-2026-093030)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093030 advisory. An issue was discovered in cairo 1.16.0. There is an assertion problem in the function cairoarcindirection in the file cairo-arc.c. Tenable has extracted the precedi...

ROOT-OS-DEBIAN-12-CVE-2025-50422 CVE-2025-50422 in cairo - Patched by Root

Root has patched CVE-2025-50422 in the cairo package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2019-6461 CVE-2019-6461 in cairo - Patched by Root

Root has patched CVE-2019-6461 in the cairo package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2019-6462 CVE-2019-6462 in cairo - Patched by Root

Root has patched CVE-2019-6462 in the cairo package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-50422 CVE-2025-50422 in cairo - Patched by Root

Root has patched CVE-2025-50422 in the cairo package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-50422 CVE-2025-50422 in cairo - Patched by Root

Root has patched CVE-2025-50422 in the cairo package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-49452

WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped HTML presentational-hint attribute values into CSS in weasyprint/css/init.py when presentationalhints=True. The background attribute is inserted into a background-image:url declaration and parsed b...