Most recent entries from all

ALSA-2022:1961 — Moderate: cairo and pixman security and bug fix update

Affected: AlmaLinux:8: cairo, AlmaLinux:8: cairo-devel, AlmaLinux:8: cairo-gobject, AlmaLinux:8: cairo-gobject-devel, AlmaLinux:8: pixman, AlmaLinux:8: pixman-devel

Cairo is a 2D graphics library designed to provide high-quality display and print output.

Pixman is a pixel manipulation library for the X Window System and Cairo.

Security Fix(es):

* cairo: libreoffice slideshow aborts with stack smashing in cairo's composite_boxes (CVE-2020-35492)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2021-03445

Withdrawn: BELL-CVE-2020-35492 — CVE-2020-35492 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2025-avi-0969 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2025-avi-0969

EUVD-2026-215943

fkie_cve-2020-35492

A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo's image-compositor (for example, by convincing a user to open a file in an application using cairo, or if an application uses cairo on untrusted input) to cause a stack buffer overflow -> out-of-bounds WRITE. The highest impact from this vulnerability is to confidentiality, integrity, as well as system availability.

GHSA-65pg-7gjm-q28m

gsd-2020-35492

msrc_CVE-2020-35492 — A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can pr…

msrc_CVE-2020-35492

OESA-2021-1155 — cairo security update

Affected: openEuler:20.03-LTS-SP1: cairo

Security Fix(es): A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo's image-compositor (for example, by convincing a user to open a file in an application using cairo, or if an application uses cairo on untrusted input) to cause a stack buffer overflow -> out-of-bounds WRITE. The highest impact from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2020-35492)

RHSA-2022:1961 — Red Hat Security Advisory: cairo and pixman security and bug fix update

cairo: libreoffice slideshow aborts with stack smashing in cairo's composite_boxes

UBUNTU-CVE-2020-35492

Affected: Ubuntu:Pro:16.04:LTS: cairo, Ubuntu:Pro:18.04:LTS: cairo, Ubuntu:Pro:20.04:LTS: cairo