{"id":"CLSA-2026-1787645764","summary":"Fix CVE(s): CVE-2020-35492","details":"   * SECURITY UPDATE: stack-based buffer overflow in the image compositor\n     - debian/patches/CVE-2020-35492.patch: in _inplace_src_spans() in\n       src/cairo-image-compositor.c, take the mask write pointer from\n       pixman_image_get_data(r-\u003emask) instead of the r-\u003e_buf tail of the\n       stack-allocated span renderer, so a row wider than SZ_BUF (whose\n       mask pixman already backs with a heap allocation) can no longer be\n       written past the end of the stack buffer.\n     - CVE-2020-35492","modified":"2026-10-26T09:31:34.051413653Z","published":"2026-08-25T08:16:15Z","upstream":["CVE-2020-35492"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787645764.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-35492"}],"affected":[{"package":{"name":"cairo-perf-utils","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/cairo-perf-utils?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.10-2ubuntu0.1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787645764.json"}},{"package":{"name":"libcairo-gobject2","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libcairo-gobject2?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.10-2ubuntu0.1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787645764.json"}},{"package":{"name":"libcairo-script-interpreter2","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libcairo-script-interpreter2?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.10-2ubuntu0.1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787645764.json"}},{"package":{"name":"libcairo2","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libcairo2?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.10-2ubuntu0.1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787645764.json"}},{"package":{"name":"libcairo2-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libcairo2-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.10-2ubuntu0.1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787645764.json"}},{"package":{"name":"libcairo2-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libcairo2-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.10-2ubuntu0.1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787645764.json"}}],"schema_version":"1.9.0"}