Search for packages
Package details: pkg:deb/debian/cairo@1.16.0-5
purl pkg:deb/debian/cairo@1.16.0-5
Next non-vulnerable version 1.18.4-1
Latest non-vulnerable version 1.18.4-1
Risk 3.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-adan-ptr4-aaae
Aliases:
CVE-2019-6461
An issue was discovered in cairo 1.16.0. There is an assertion problem in the function _cairo_arc_in_direction in the file cairo-arc.c.
1.18.0-1
Affected by 0 other vulnerabilities.
1.18.0-3
Affected by 0 other vulnerabilities.
1.18.2-1
Affected by 0 other vulnerabilities.
1.18.2-2
Affected by 0 other vulnerabilities.
1.18.4-1
Affected by 0 other vulnerabilities.
VCID-zk4u-z28v-aaas
Aliases:
CVE-2019-6462
An issue was discovered in cairo 1.16.0. There is an infinite loop in the function _arc_error_normalized in the file cairo-arc.c, related to _arc_max_angle_for_tolerance_normalized.
1.17.8-3
Affected by 0 other vulnerabilities.
1.18.0-1
Affected by 0 other vulnerabilities.
1.18.0-3
Affected by 0 other vulnerabilities.
1.18.2-1
Affected by 0 other vulnerabilities.
1.18.2-2
Affected by 0 other vulnerabilities.
1.18.4-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-kfpb-m615-aaar A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo's image-compositor (for example, by convincing a user to open a file in an application using cairo, or if an application uses cairo on untrusted input) to cause a stack buffer overflow -> out-of-bounds WRITE. The highest impact from this vulnerability is to confidentiality, integrity, as well as system availability. CVE-2020-35492

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T20:52:42.721211+00:00 Debian Importer Affected by VCID-zk4u-z28v-aaas None 36.1.3
2025-06-21T15:53:35.843660+00:00 Debian Importer Affected by VCID-adan-ptr4-aaae None 36.1.3
2025-06-21T10:27:15.943459+00:00 Debian Importer Affected by VCID-adan-ptr4-aaae https://security-tracker.debian.org/tracker/data/json 36.1.3
2025-06-21T05:19:34.561400+00:00 Debian Importer Affected by VCID-zk4u-z28v-aaas https://security-tracker.debian.org/tracker/data/json 36.1.3
2025-06-21T02:08:03.852912+00:00 Debian Oval Importer Fixing VCID-kfpb-m615-aaar None 36.1.3
2025-06-07T19:31:47.193449+00:00 Debian Oval Importer Fixing VCID-kfpb-m615-aaar None 36.1.0
2025-04-12T21:39:01.868815+00:00 Debian Oval Importer Fixing VCID-kfpb-m615-aaar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-07T18:09:27.426599+00:00 Debian Oval Importer Fixing VCID-kfpb-m615-aaar None 36.0.0
2025-04-05T16:54:34.598833+00:00 Debian Importer Affected by VCID-zk4u-z28v-aaas None 36.0.0
2025-04-05T12:24:04.288398+00:00 Debian Importer Affected by VCID-adan-ptr4-aaae None 36.0.0
2025-04-05T07:41:29.080119+00:00 Debian Importer Affected by VCID-adan-ptr4-aaae https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-04-05T02:33:55.504044+00:00 Debian Importer Affected by VCID-zk4u-z28v-aaas https://security-tracker.debian.org/tracker/data/json 36.0.0
2025-02-19T10:24:58.726567+00:00 Debian Importer Affected by VCID-zk4u-z28v-aaas None 35.1.0
2025-02-19T10:24:57.298303+00:00 Debian Importer Affected by VCID-zk4u-z28v-aaas https://security-tracker.debian.org/tracker/data/json 35.1.0
2025-02-19T10:24:55.241199+00:00 Debian Importer Affected by VCID-adan-ptr4-aaae None 35.1.0
2025-02-19T10:24:51.672421+00:00 Debian Importer Affected by VCID-adan-ptr4-aaae https://security-tracker.debian.org/tracker/data/json 35.1.0
2024-11-22T07:54:19.098285+00:00 Debian Importer Affected by VCID-zk4u-z28v-aaas https://security-tracker.debian.org/tracker/data/json 35.0.0
2024-11-22T07:54:17.021094+00:00 Debian Importer Affected by VCID-adan-ptr4-aaae https://security-tracker.debian.org/tracker/data/json 35.0.0
2024-11-20T06:15:59.203029+00:00 Debian Importer Affected by VCID-zk4u-z28v-aaas https://security-tracker.debian.org/tracker/data/json 34.3.2
2024-11-20T06:15:57.133861+00:00 Debian Importer Affected by VCID-adan-ptr4-aaae https://security-tracker.debian.org/tracker/data/json 34.3.2
2024-10-09T06:56:37.862598+00:00 Debian Importer Affected by VCID-zk4u-z28v-aaas https://security-tracker.debian.org/tracker/data/json 34.0.2
2024-10-09T06:56:35.771679+00:00 Debian Importer Affected by VCID-adan-ptr4-aaae https://security-tracker.debian.org/tracker/data/json 34.0.2
2024-09-18T17:55:21.574679+00:00 Debian Importer Affected by VCID-zk4u-z28v-aaas https://security-tracker.debian.org/tracker/data/json 34.0.1
2024-09-18T17:55:20.881212+00:00 Debian Importer Affected by VCID-adan-ptr4-aaae https://security-tracker.debian.org/tracker/data/json 34.0.1
2024-04-24T16:22:51.253458+00:00 Debian Importer Affected by VCID-zk4u-z28v-aaas None 34.0.0rc4
2024-04-24T16:22:50.362931+00:00 Debian Importer Affected by VCID-zk4u-z28v-aaas https://security-tracker.debian.org/tracker/data/json 34.0.0rc4
2024-04-24T16:22:48.692836+00:00 Debian Importer Affected by VCID-adan-ptr4-aaae None 34.0.0rc4
2024-04-24T16:22:46.803440+00:00 Debian Importer Affected by VCID-adan-ptr4-aaae https://security-tracker.debian.org/tracker/data/json 34.0.0rc4
2024-01-10T18:31:17.687314+00:00 Debian Importer Affected by VCID-zk4u-z28v-aaas https://security-tracker.debian.org/tracker/data/json 34.0.0rc2
2024-01-10T18:31:16.099959+00:00 Debian Importer Affected by VCID-zk4u-z28v-aaas None 34.0.0rc2
2024-01-10T18:31:14.487549+00:00 Debian Importer Affected by VCID-adan-ptr4-aaae None 34.0.0rc2
2024-01-10T18:31:13.677673+00:00 Debian Importer Affected by VCID-adan-ptr4-aaae https://security-tracker.debian.org/tracker/data/json 34.0.0rc2
2024-01-04T08:01:20.845888+00:00 Debian Importer Affected by VCID-zk4u-z28v-aaas https://security-tracker.debian.org/tracker/data/json 34.0.0rc1
2024-01-04T08:01:19.194864+00:00 Debian Importer Affected by VCID-zk4u-z28v-aaas None 34.0.0rc1
2024-01-04T08:01:17.577782+00:00 Debian Importer Affected by VCID-adan-ptr4-aaae None 34.0.0rc1
2024-01-04T08:01:16.763814+00:00 Debian Importer Affected by VCID-adan-ptr4-aaae https://security-tracker.debian.org/tracker/data/json 34.0.0rc1