Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/cairo@1.16.0-5?distro=trixie
purl pkg:deb/debian/cairo@1.16.0-5?distro=trixie
Next non-vulnerable version 1.17.8-3
Latest non-vulnerable version 1.18.4-3
Risk 3.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-2x1s-k411-sygp
Aliases:
CVE-2019-6462
Multiple vulnerabilities have been discovered in Cairo, the worst of which a denial of service.
1.17.8-3
Affected by 0 other vulnerabilities.
1.18.4-1
Affected by 0 other vulnerabilities.
1.18.4-3
Affected by 0 other vulnerabilities.
VCID-xjzg-rhgm-nudn
Aliases:
CVE-2019-6461
Multiple vulnerabilities have been discovered in Cairo, the worst of which a denial of service.
1.18.0-1
Affected by 0 other vulnerabilities.
1.18.4-1
Affected by 0 other vulnerabilities.
1.18.4-3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (6)
Vulnerability Summary Aliases
VCID-8bnq-c161-2yaq cairo: Invalid free in cairo_ft_apply_variations() resulting in a denial of service CVE-2018-19876
VCID-cadj-unsk-rubv Multiple vulnerabilities were found in Cairo, the worst of which could cause a Denial of Service condition. CVE-2016-9082
VCID-rzf2-bp8j-27fq A buffer overflow vulnerability has been discovered in Cairo which could result in denial of service. CVE-2020-35492
VCID-s8zd-7rpb-ukct Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation. CVE-2009-2044
VCID-vf5a-zwgr-pqg5 Multiple vulnerabilities were found in Cairo, the worst of which could cause a Denial of Service condition. CVE-2017-9814
VCID-w7a8-e349-bfdx cairo: out of bounds read in fill_xrgb32_lerp_opaque_spans CVE-2016-3190

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:45:21.968741+00:00 Debian Importer Fixing VCID-cadj-unsk-rubv https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:28:50.785952+00:00 Debian Importer Fixing VCID-w7a8-e349-bfdx https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:08:16.792576+00:00 Debian Importer Fixing VCID-8bnq-c161-2yaq https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:09:40.992798+00:00 Debian Importer Fixing VCID-s8zd-7rpb-ukct https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:06:06.803752+00:00 Debian Importer Fixing VCID-vf5a-zwgr-pqg5 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:02:35.739472+00:00 Debian Importer Fixing VCID-rzf2-bp8j-27fq https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:44:52.972592+00:00 Debian Importer Fixing VCID-cadj-unsk-rubv https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:32:40.369166+00:00 Debian Importer Fixing VCID-w7a8-e349-bfdx https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:17:57.797172+00:00 Debian Importer Fixing VCID-8bnq-c161-2yaq https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:35:05.825176+00:00 Debian Importer Fixing VCID-s8zd-7rpb-ukct https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:32:25.573300+00:00 Debian Importer Fixing VCID-vf5a-zwgr-pqg5 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:29:50.861573+00:00 Debian Importer Fixing VCID-rzf2-bp8j-27fq https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:20:10.788522+00:00 Debian Importer Affected by VCID-2x1s-k411-sygp https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:20:10.766519+00:00 Debian Importer Affected by VCID-xjzg-rhgm-nudn https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:16:04.213430+00:00 Debian Importer Fixing VCID-cadj-unsk-rubv https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:15:13.012875+00:00 Debian Importer Fixing VCID-w7a8-e349-bfdx https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:13:50.554425+00:00 Debian Importer Fixing VCID-8bnq-c161-2yaq https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:10:36.410207+00:00 Debian Importer Fixing VCID-s8zd-7rpb-ukct https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:10:24.395614+00:00 Debian Importer Fixing VCID-vf5a-zwgr-pqg5 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:10:10.762917+00:00 Debian Importer Fixing VCID-rzf2-bp8j-27fq https://security-tracker.debian.org/tracker/data/json 38.1.0