Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:1873-1

Опубликовано: 03 июл. 2018
Источник: suse-cvrf

Описание

Security update for cairo

This update for cairo fixes the following issues:

The following security vulnerability was addressed:

  • CVE-2017-9814: Fixed and out-of-bounds read in cairo-truetype-subset.c by replacing the malloc implementation with _cairo_malloc and checking the size before memory allocation (bsc#1049092)

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15
cairo-devel-1.15.10-4.5.1
libcairo-gobject2-1.15.10-4.5.1
libcairo-script-interpreter2-1.15.10-4.5.1
libcairo2-1.15.10-4.5.1
SUSE Linux Enterprise Module for Desktop Applications 15
libcairo2-32bit-1.15.10-4.5.1

Ссылки

Описание

cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15:cairo-devel-1.15.10-4.5.1
SUSE Linux Enterprise Module for Basesystem 15:libcairo-gobject2-1.15.10-4.5.1
SUSE Linux Enterprise Module for Basesystem 15:libcairo-script-interpreter2-1.15.10-4.5.1
SUSE Linux Enterprise Module for Basesystem 15:libcairo2-1.15.10-4.5.1
Ссылки