890 matches found
gimp:2.8 security update
An update is available for module.pygtk2, module.python2-pycairo, python2-pycairo, pygobject2, module.pygobject2, module.gimp, gimp, pygtk2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
PT-2026-25586
Summary Prior to Memray 1.19.2, Memray rendered the command line of the tracked process directly into generated HTML reports without escaping. Because there was no escaping, attacker-controlled command line arguments were inserted as raw HTML into the generated report. This allowed JavaScript...
Linux Distros Unpatched Vulnerability : CVE-2026-31899
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG has exponential denial of service via recursive element amplificatio...
CVE-2026-31899
CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG has exponential denial of service via recursive element amplification in cairosvg/defs.py. This causes CPU exhaustion from a small input...
CVE-2026-31899
CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG has exponential denial of service via recursive element amplification in cairosvg/defs.py. This causes CPU exhaustion from a small input...
CairoSVG vulnerable to Exponential DoS via recursive <use> element amplification
Kozea/CairoSVG 300K downloads/week has exponential denial of service via recursive element amplification in cairosvg/defs.py line 335. This causes CPU exhaustion from a small input...
MiracleLinux 8 : cairo-1.15.12-6.el8, pixman-0.38.4-2.el8 (AXSA:2022-3446:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3446:01 advisory. cairo: libreoffice slideshow aborts with stack smashing in cairo's compositeboxes CVE-2020-35492 Tenable has extracted the preceding description block direct...
CVE-2022-31153
OpenZeppelin Contracts for Cairo is a library for contract development written in Cairo for StarkNet, a decentralized ZK Rollup. Version 0.2.0 is vulnerable to an error that renders account contracts unusable on live networks. This issue affects all accounts vanilla and ethereum flavors in the...
cairo:svg-render-fuzzer: Stack-use-after-return in intersect
Project: https://gitlab.freedesktop.org/cairo/cairo.git Detailed Report: https://oss-fuzz.com/testcase?key=5101854309810176 Project: cairo Fuzzing Engine: libFuzzer Fuzz Target: svg-render-fuzzer Job Type: libfuzzerasancairo Platform Id: linux Crash Type: Stack-use-after-return WRITE 8 Crash...
Advisory ROSA-SA-2025-3112
Software: cairo 1.15.12 OS: ROSA Virtualization 2.1 packageevrstring: cairo-1.15.12-6.rv3 CVE-ID: CVE-2020-35492 BDU-ID: 2021-03445 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the image-compositor.c component of the Cairo vector graphics library is related to a data stack buffer overflow...
Advisory ROSA-SA-2025-3111
Software: pixman 0.38.4 OS: ROSA Virtualization 2.1 packageevrstring: pixman-0.38.4-4.rv3 CVE-ID: CVE-2020-35492 BDU-ID: 2021-03445 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the image-compositor.c component of the Cairo vector graphics library is related to a data stack buffer overflow...
OESA-2025-2732 cairo security update
Cairo is a 2D graphics libarary with support for multiple output devices. It provides high-quality display and print output and this package also contains functionality to make cairo graphics library integrate well with GObject used by GNOME. Security Fixes: Cairo through 1.18.4, as used in Poppl...
OESA-2025-2733 cairo security update
Cairo is a 2D graphics libarary with support for multiple output devices. It provides high-quality display and print output and this package also contains functionality to make cairo graphics library integrate well with GObject used by GNOME. Security Fixes: Cairo through 1.18.4, as used in Poppl...
OESA-2025-2734 cairo security update
Cairo is a 2D graphics libarary with support for multiple output devices. It provides high-quality display and print output and this package also contains functionality to make cairo graphics library integrate well with GObject used by GNOME. Security Fixes: Cairo through 1.18.4, as used in Poppl...
TencentOS Server 4: cairo (TSSA-2025:0708)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0708 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
JLSEC-2025-14 cairo 1.16.0, in `cairo_ft_apply_variations()` in cairo-ft-font.c, would free memory using a free...
cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free: invalid pointer" error...
JLSEC-2025-12 cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of...
cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read because of mishandling of an unexpected malloc0 call...
JLSEC-2025-17 A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4
A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo's image-compositor for example, by convincing a user to open a file in an application using cairo, or if an application uses cairo on untruste...
JLSEC-2025-13 cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted...
cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c the generate and renderrows functions and cairo-image-compositor.c the cairoimagespansandzero function...