CVE-2021-21236

CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...

DLA-2518-1 cairo - security update

Bulletin has no description...

Debian DLA-2518-1 : cairo security update

LibreOffice slideshow aborts with stack smashing in cairos compositeboxes. For Debian 9 stretch, this problem has been fixed in version 1.14.8-1+deb9u1. We recommend that you upgrade your cairo packages. For the detailed security status of cairo please refer to its security tracker page at:...

[SECURITY] [DLA 2518-1] cairo security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2518-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 06, 2021 https://wiki.debian.org/LTS -...

CVE-2020-35492

A flaw was found in cairo's image-compositor.c. This flaw allows an attacker who can provide a crafted input file to cairo's image-compositor for example, by convincing a user to open a file in an application using cairo, or if an application uses cairo on untrusted input to cause a stack buffer...

cairo Buffer Error Vulnerability

cairo is cairo open source a let used to provide vector graphics drawing free library . Provide in multiple contexts to do two-dimensional space drawing , advanced more can use hardware acceleration . cairo 1.17.4 before the version of the buffer error vulnerability , an attacker exploited the...

EulerOS 2.0 SP5 : cairo (EulerOS-SA-2020-2540)

According to the versions of the cairo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in cairo 1.16.0. There is an assertion problem in the function cairoarcindirection in the file cairo-arc.c.CVE-2019-6461 ...

Huawei EulerOS: Security Advisory for cairo (EulerOS-SA-2020-2540)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2020-6179 · Cairo +7 · Cairo +7

Name of the Vulnerable Software and Affected Versions: cairo versions prior to 1.17.4 Description: A flaw was found in cairo's image-compositor.c, allowing an attacker who can provide a crafted input file to cause a stack buffer overflow, resulting in an out-of-bounds WRITE. This can lead to...

CVE-2018-19876 affecting package cairo 1.16.0-5

CVE-2018-19876 affecting package cairo 1.16.0-5. A patched version of the package is available...

Huawei EulerOS: Security Advisory for cairo (EulerOS-SA-2020-2332)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : cairo (EulerOS-SA-2020-2332)

According to the version of the cairo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in cairo 1.16.0. There is an infinite loop in the function arcerrornormalized in the file cairo-arc.c, related to...

Huawei EulerOS: Security Advisory for cairo (EulerOS-SA-2020-2057)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : cairo (EulerOS-SA-2020-2057)

According to the versions of the cairo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in cairo 1.16.0. There is an assertion problem in the function cairoarcindirection in the file cairo-arc.c.CVE-2019-6461 ...

USN-4541-1 gnuplot vulnerabilities

Tim Blazytko, Cornelius Aschermann, Sergej Schumilo and Nils Bars discovered that Gnuplot did not properly validate string sizes in the dfgenerateasciiarrayentry function. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service attack or arbitra...

MGASA-2020-0359 Updated cairo packages fix security vulnerability

Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FTLoadGlyph and FTRenderGlyph resulting in an application crash. CVE-2017-7475...

Updated cairo packages fix security vulnerability

Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FTLoadGlyph and FTRenderGlyph resulting in an application crash. CVE-2017-7475...

An issue was discovered in cairo 1.16.0. There is an assertion problem in the function _cairo_arc_in_direction in the file cairo-arc.c.

...

An issue was discovered in cairo 1.16.0. There is an infinite loop in the function _arc_error_normalized in the file cairo-arc.c related to _arc_max_angle_for_tolerance_normalized.

...

cairo 1.16.0 in cairo_ft_apply_variations() in cairo-ft-font.c would free memory using a free function incompatible with WebKit's fastMalloc leading to an application crash with a "free(): invalid pointer" error.

...