Advisory ROSA-SA-2024-2447

software: cairo 1.16.0
WASP: ROSA-CHROME

package_evr_string: cairo-1.16.0-5

CVE-ID: CVE-2019-6461
BDU-ID: None
CVE-Crit: MEDIUM
CVE-DESC.: There is an assertion problem in the _cairo_arc_in_direction function in the cairo-arc.c file.
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update cairo

CVE-ID: CVE-2019-6462
BDU-ID: None
CVE-Crit: MEDIUM
CVE-DESC.: There is an infinite loop in the _arc_error_normalized function in cairo-arc.c associated with _arc_max_angle_for_tolerance_normalized.
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update cairo

CVE-ID: CVE-2018-19876
BDU-ID: None
CVE-Crit: MEDIUM
CVE-DESC.: cairo 1.16.0 in cairo_ft_apply_variations() in cairo-ft_apply_variations() in cairo-ft-font.c freed memory using a free function incompatible with WebKit’s fastMalloc, causing the application to crash with the error “free(): invalid pointer”.
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update cairo