Summary
[0.6.12-4.1]
- Fix CVE-2020-12825
Resolves: #1866484
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libcroco | 0:0.6.12-4.el8_2.1 |
| Oracle Linux · 8 | libcroco-devel | 0:0.6.12-4.el8_2.1 |
Vulnerabilities 1
-
Unscored —
libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumptio…