Security update for cairo (moderate)

2018-07-0600:08:57

lists.opensuse.org

0.005 Low

EPSS

Percentile

74.3%

JSON

This update for cairo fixes the following issues:

The following security vulnerability was addressed:

CVE-2017-9814: Fixed and out-of-bounds read in cairo-truetype-subset.c
by replacing the malloc implementation with _cairo_malloc and checking
the size before memory allocation (bsc#1049092)

This update was imported from the SUSE:SLE-15:Update update project.

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.0x86_64libcairo2< 1.15.10-lp150.3.3.1libcairo2-1.15.10-lp150.3.3.1.x86_64.rpm
openSUSE Leap15.0x86_64libcairo-script-interpreter2-32bit< 1.15.10-lp150.3.3.1libcairo-script-interpreter2-32bit-1.15.10-lp150.3.3.1.x86_64.rpm
openSUSE Leap15.0x86_64libcairo-gobject2-32bit< 1.15.10-lp150.3.3.1libcairo-gobject2-32bit-1.15.10-lp150.3.3.1.x86_64.rpm
openSUSE Leap15.0x86_64libcairo-script-interpreter2-32bit-debuginfo< 1.15.10-lp150.3.3.1libcairo-script-interpreter2-32bit-debuginfo-1.15.10-lp150.3.3.1.x86_64.rpm
openSUSE Leap15.0x86_64libcairo-gobject2-debuginfo< 1.15.10-lp150.3.3.1libcairo-gobject2-debuginfo-1.15.10-lp150.3.3.1.x86_64.rpm
openSUSE Leap15.0i586libcairo-script-interpreter2-debuginfo< 1.15.10-lp150.3.3.1libcairo-script-interpreter2-debuginfo-1.15.10-lp150.3.3.1.i586.rpm
openSUSE Leap15.0x86_64libcairo2-debuginfo< 1.15.10-lp150.3.3.1libcairo2-debuginfo-1.15.10-lp150.3.3.1.x86_64.rpm
openSUSE Leap15.0x86_64libcairo-script-interpreter2< 1.15.10-lp150.3.3.1libcairo-script-interpreter2-1.15.10-lp150.3.3.1.x86_64.rpm
openSUSE Leap15.0x86_64libcairo-gobject2< 1.15.10-lp150.3.3.1libcairo-gobject2-1.15.10-lp150.3.3.1.x86_64.rpm
openSUSE Leap15.0x86_64libcairo-gobject2-32bit-debuginfo< 1.15.10-lp150.3.3.1libcairo-gobject2-32bit-debuginfo-1.15.10-lp150.3.3.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE Leap	15.0	x86_64	libcairo2	< 1.15.10-lp150.3.3.1	libcairo2-1.15.10-lp150.3.3.1.x86_64.rpm
openSUSE Leap	15.0	x86_64	libcairo-script-interpreter2-32bit	< 1.15.10-lp150.3.3.1	libcairo-script-interpreter2-32bit-1.15.10-lp150.3.3.1.x86_64.rpm
openSUSE Leap	15.0	x86_64	libcairo-gobject2-32bit	< 1.15.10-lp150.3.3.1	libcairo-gobject2-32bit-1.15.10-lp150.3.3.1.x86_64.rpm
openSUSE Leap	15.0	x86_64	libcairo-script-interpreter2-32bit-debuginfo	< 1.15.10-lp150.3.3.1	libcairo-script-interpreter2-32bit-debuginfo-1.15.10-lp150.3.3.1.x86_64.rpm
openSUSE Leap	15.0	x86_64	libcairo-gobject2-debuginfo	< 1.15.10-lp150.3.3.1	libcairo-gobject2-debuginfo-1.15.10-lp150.3.3.1.x86_64.rpm
openSUSE Leap	15.0	i586	libcairo-script-interpreter2-debuginfo	< 1.15.10-lp150.3.3.1	libcairo-script-interpreter2-debuginfo-1.15.10-lp150.3.3.1.i586.rpm
openSUSE Leap	15.0	x86_64	libcairo2-debuginfo	< 1.15.10-lp150.3.3.1	libcairo2-debuginfo-1.15.10-lp150.3.3.1.x86_64.rpm
openSUSE Leap	15.0	x86_64	libcairo-script-interpreter2	< 1.15.10-lp150.3.3.1	libcairo-script-interpreter2-1.15.10-lp150.3.3.1.x86_64.rpm
openSUSE Leap	15.0	x86_64	libcairo-gobject2	< 1.15.10-lp150.3.3.1	libcairo-gobject2-1.15.10-lp150.3.3.1.x86_64.rpm
openSUSE Leap	15.0	x86_64	libcairo-gobject2-32bit-debuginfo	< 1.15.10-lp150.3.3.1	libcairo-gobject2-32bit-debuginfo-1.15.10-lp150.3.3.1.x86_64.rpm