There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function
    incompatible with WebKit's fastMalloc, leading to an application crash with a "free(): invalid pointer"
    error. (CVE-2018-19876)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - cairo-ft-font.c 的 cairo_ft_apply_variations() 中的 cairo 1.16.0會使用與 WebKit fastMalloc 不相容的釋放函式釋放記憶體進而導致應用程式因 free():無效指標錯誤而損毀。 (CVE-2018-19876)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - cairo 1.16.0在 cairo-ft-font.c 的 cairo_ft_apply_variations() 中会使用与 WebKit 的 fastMalloc 不兼容的释放函数来释放内存导致应用程序因 free(): 无效指针错误而崩溃。 (CVE-2018-19876)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

この更新プログラムでは、freetypeのデフォルトのLCDフィルターを使用してテキストのサブピクセルレンダリングを有効にしたとき、グリフ周辺のカラーアーチファクトを低減します。

また、メモリの解放に誤った関数を使用することで発生するクラッシュも修正されます（CVE-2018-19876）。

注意：Tenable Network Securityは、前述の記述ブロックをFedora更新システムのWebサイトから直接抽出しています。
Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - cairo-ft-font.c の cairo_ft_apply_variations() で、cairo 1.16.0は、WebKit の fastMalloc と互換性のない解放関数を使用してメモリを解放し、free(): 無効なポインターエラーでアプリケーションのクラッシュを引き起こします。CVE-2018-19876

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

An update of the cairo package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function     incompatible with WebKit's fastMalloc, leading to an application crash with a free(): invalid pointer     error. (CVE-2018-19876)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update lowers amount of color artefacts around glyphs when subpixel rendering is enabled for text by using freetype's default LCD filter.

It also fixes a crash caused by using of wrong function for freeing of memory (CVE-2018-19876).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cairo package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - cairo 1.16.0, in cairo_ft_apply_variations() in     cairo-ft-font.c, would free memory using a free     function incompatible with WebKit's fastMalloc, leading     to an application crash with a 'free(): invalid     pointer' error.(CVE-2018-19876)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cairo packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - cairo 1.16.0, in cairo_ft_apply_variations() in     cairo-ft-font.c, would free memory using a free     function incompatible with WebKit's fastMalloc, leading     to an application crash with a 'free(): invalid     pointer' error.(CVE-2018-19876)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
400573	Alpine: multiple cairo packages: security update to 1.16.0-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/8/16	2026/7/2	medium
400573	Alpine: multiple cairo packages: security update to 1.16.0-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/8/16	2026/7/2	medium
423784	Alpine: multiple cairo packages: security update to 1.16.0-r1	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	medium
423784	Alpine: multiple cairo packages: security update to 1.16.0-r1	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	medium
260314	Linux Distros 未修補的弱點：CVE-2018-19876	Nessus	Misc.	2025/9/2	2025/9/4	medium
260314	Linux Distros 未修补的漏洞：CVE-2018-19876	Nessus	Misc.	2025/9/2	2025/9/4	medium
120358	Fedora 29：cairo（2018-3a195026f5）	Nessus	Fedora Local Security Checks	2019/1/3	2024/7/8	medium
260314	Linux Distros のパッチ未適用の脆弱性: CVE-2018-19876	Nessus	Misc.	2025/9/2	2025/9/4	medium
203096	Photon OS 3.0: Cairo PHSA-2019-3.0-0008	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/24	medium
260314	Linux Distros Unpatched Vulnerability : CVE-2018-19876	Nessus	Misc.	2025/9/2	2025/9/4	medium
203095	Photon OS 2.0: Cairo PHSA-2019-2.0-0145	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/23	medium
125156	Photon OS 1.0: Cairo PHSA-2019-1.0-0220	Nessus	PhotonOS Local Security Checks	2019/5/15	2024/5/22	medium
120358	Fedora 29 : cairo (2018-3a195026f5)	Nessus	Fedora Local Security Checks	2019/1/3	2024/7/8	medium
146236	EulerOS 2.0 SP9 : cairo (EulerOS-SA-2021-1243)	Nessus	Huawei Local Security Checks	2021/2/5	2024/1/23	medium
146254	EulerOS 2.0 SP9 : cairo (EulerOS-SA-2021-1262)	Nessus	Huawei Local Security Checks	2021/2/5	2024/1/23	medium
147093	EulerOS Virtualization for ARM 64 3.0.6.0 : cairo (EulerOS-SA-2021-1547)	Nessus	Huawei Local Security Checks	2021/3/4	2024/1/16	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium