ALT-BU-2014-3061-2
Branch sisyphus update bulletin.
Closed vulnerabilities
BDU:2016-01641
Уязвимость библиотеки векторной графики Cairo, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2014-5116
The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a large string.
Modified: 2024-11-21
CVE-2016-3190
The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a negative span length.
- openSUSE-SU-2016:1007
- openSUSE-SU-2016:1007
- https://bugzilla.redhat.com/show_bug.cgi?id=1318977
- https://bugzilla.redhat.com/show_bug.cgi?id=1318977
- https://cgit.freedesktop.org/cairo/patch/src/cairo-image-compositor.c?id=5c82d91a5e15d29b1489dcb413b24ee7fdf59934
- https://cgit.freedesktop.org/cairo/patch/src/cairo-image-compositor.c?id=5c82d91a5e15d29b1489dcb413b24ee7fdf59934
- [cairo-announce] 20150310 cairo release 1.14.2 now available
- [cairo-announce] 20150310 cairo release 1.14.2 now available
Modified: 2024-11-21
CVE-2016-9082
Integer overflow in the write_png function in cairo 1.14.6 allows remote attackers to cause a denial of service (invalid pointer dereference) via a large svg file.
- [oss-security] 20161027 Re: librsvg and cairo are causing libpng to write out-of-bounds
- [oss-security] 20161027 Re: librsvg and cairo are causing libpng to write out-of-bounds
- 93931
- 93931
- https://bugs.freedesktop.org/attachment.cgi?id=127421
- https://bugs.freedesktop.org/attachment.cgi?id=127421
- https://bugs.freedesktop.org/show_bug.cgi?id=98165
- https://bugs.freedesktop.org/show_bug.cgi?id=98165
- https://bugzilla.redhat.com/show_bug.cgi?id=1312337
- https://bugzilla.redhat.com/show_bug.cgi?id=1312337
- GLSA-201904-01
- GLSA-201904-01
Modified: 2024-11-21
CVE-2017-7475
Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash.
- [oss-security] 20170428 CVE-2017-7475 Cairo-1.15.4 Denial-of-Service Attack due to Logical Problem in Program
- [oss-security] 20170428 CVE-2017-7475 Cairo-1.15.4 Denial-of-Service Attack due to Logical Problem in Program
- https://bugs.freedesktop.org/show_bug.cgi?id=100763
- https://bugs.freedesktop.org/show_bug.cgi?id=100763
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7475
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7475
- [mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar
- [mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar
Package firefox-TabMixPlus updated to version 0.4.1.5.2-alt1 for branch sisyphus in task 132738.
Closed bugs
Обновить до последней версии