Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

SUSE: 2018:1453-1 Moderate Fix for Cairo Segfault and DoS Issues

suse
Calendar Grey May 28, 2018
Scroller Suse
SUSE Security Update for cairo fixes multiple issues, rated moderate: segfault and DoS.
An update that fixes three vulnerabilities is now available

Summary

This update for cairo fixes the following issues: - CVE-2016-9082: Fixed a segfault when using >4GB images since int values were used for pointer operations (bsc#1007255). - CVE-2017-9814: Replace malloc with _cairo_malloc and check cmap size before allocating to prevent DoS (bsc#1049092). - CVE-2017-7475: Fix a segfault in get_bitmap_surface due to malformed font (bsc#1036789). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-cairo-13627=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-cairo-13627=1 - SUSE Linux Enterprise Debuginfo 11-SP4:

Topics%20covered

Topics Covered

security advisory moderate DoS segfault SUSE Linux cairo

References

#1007255 #1036789 #1049092

Cross- CVE-2016-9082 CVE-2017-7475 CVE-2017-9814

Affected Products:

SUSE Linux Enterprise Software Development Kit 11-SP4

SUSE Linux Enterprise Server 11-SP4

SUSE Linux Enterprise Debuginfo 11-SP4

https://www.suse.com/security/cve/CVE-2016-9082.html

https://www.suse.com/security/cve/CVE-2017-7475.html

https://www.suse.com/security/cve/CVE-2017-9814.html

https://bugzilla.suse.com/1007255

https://bugzilla.suse.com/1036789

https://bugzilla.suse.com/1049092

Announcement ID: SUSE-SU-2018:1453-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate DoS segfault SUSE Linux cairo

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.