tocsin

Debian/cairo: medium 5.5

Integer overflow in the write_png function in cairo 1.14.6 allows remote attackers to cause a denial of service (invalid pointer dereference) via a large svg file.

Action: Upgrade cairo to 1.14.6-1.1 or later.

Affected

introducedfixedlast affected
01.14.6-1.1-

Fixed versions

1.14.6-1.1

Sources

published · modified · JSON