An update of the cairo package has been released.

According to the version of the cairo packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - cairo 1.16.0, in cairo_ft_apply_variations() in     cairo-ft-font.c, would free memory using a free     function incompatible with WebKit's fastMalloc, leading     to an application crash with a 'free(): invalid     pointer' error.(CVE-2018-19876)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

この更新プログラムでは、freetypeのデフォルトのLCDフィルターを使用してテキストのサブピクセルレンダリングを有効にしたとき、グリフ周辺のカラーアーチファクトを低減します。

また、メモリの解放に誤った関数を使用することで発生するクラッシュも修正されます（CVE-2018-19876）。

注意：Tenable Network Securityは、前述の記述ブロックをFedora更新システムのWebサイトから直接抽出しています。
Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

This update lowers amount of color artefacts around glyphs when subpixel rendering is enabled for text by using freetype's default LCD filter.

It also fixes a crash caused by using of wrong function for freeing of memory (CVE-2018-19876).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cairo package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - cairo 1.16.0, in cairo_ft_apply_variations() in     cairo-ft-font.c, would free memory using a free     function incompatible with WebKit's fastMalloc, leading     to an application crash with a 'free(): invalid     pointer' error.(CVE-2018-19876)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
203095	Photon OS 2.0: Cairo PHSA-2019-2.0-0145	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/23	medium
147093	EulerOS Virtualization for ARM 64 3.0.6.0 : cairo (EulerOS-SA-2021-1547)	Nessus	Huawei Local Security Checks	2021/3/4	2024/1/16	medium
120358	Fedora 29：cairo（2018-3a195026f5）	Nessus	Fedora Local Security Checks	2019/1/3	2024/7/8	medium
120358	Fedora 29 : cairo (2018-3a195026f5)	Nessus	Fedora Local Security Checks	2019/1/3	2024/7/8	medium
125156	Photon OS 1.0: Cairo PHSA-2019-1.0-0220	Nessus	PhotonOS Local Security Checks	2019/5/15	2024/5/22	medium
203096	Photon OS 3.0: Cairo PHSA-2019-3.0-0008	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/24	medium
146236	EulerOS 2.0 SP9 : cairo (EulerOS-SA-2021-1243)	Nessus	Huawei Local Security Checks	2021/2/5	2024/1/23	medium
146254	EulerOS 2.0 SP9 : cairo (EulerOS-SA-2021-1262)	Nessus	Huawei Local Security Checks	2021/2/5	2024/1/23	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium