Catalogo CVE

CVE-2020-12825

Security update for libcroco

[Catalogo CVE]

It was discovered that Libcroco was incorrectly accessing data structures when reading bytes from memory, which could cause a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2017-7960) It was discovered that Libcroco was incorrectly handling invalid UTF-8 values when processing CSS files. An attacker could possibly use this issue to cause a denial of service. (CVE-2017-8834, CVE-2017-8871) It was discovered that Libcroco was incorrectly implementing recursion in one of its parsing functions, which could cause an infinite recursion loop and a stack overflow due to stack consumption. An attacker could possibly use this issue to cause a denial of service. (CVE-2020-12825)

Gravità
High · CVSS 7.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.32% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Ubuntuprognome-shell3.16.4-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.1-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.2-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.2-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.3-3ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.4-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.4-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.4-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.5-0ubuntu0.1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.5-0ubuntu0.2UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.5-0ubuntu0.3UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.5-0ubuntu0.3+esm1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]

Showing 12 observations. All 71 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Opensuseleap 15.2libcroco0.6.13-lp152.2.3.1UnknownSource applicability is not established[OPENSUSE-SU-2021:1294-1]
Opensuseleap 15.3libcroco0.6.13-3.3.1UnknownSource applicability is not established[OPENSUSE-SU-2021:3123-1]
Suseenterprise storage 6libcroco0.6.12-150000.4.6.2UnknownSource applicability is not established[SUSE-SU-2022:3493-1]
Suselinux enterprise high performance computing 15 sp1-esposlibcroco0.6.12-150000.4.6.2UnknownSource applicability is not established[SUSE-SU-2022:3493-1]
Suselinux enterprise high performance computing 15 sp1-ltsslibcroco0.6.12-150000.4.6.2UnknownSource applicability is not established[SUSE-SU-2022:3493-1]
Suselinux enterprise high performance computing 15-esposlibcroco0.6.12-150000.4.6.2UnknownSource applicability is not established[SUSE-SU-2022:3493-1]
Suselinux enterprise high performance computing 15-ltsslibcroco0.6.12-150000.4.6.2UnknownSource applicability is not established[SUSE-SU-2022:3493-1]
Suselinux enterprise micro 5.0libcroco0.6.13-3.3.1UnknownSource applicability is not established[SUSE-SU-2021:3123-1]
Suselinux enterprise module for basesystem 15 sp2libcroco0.6.13-3.3.1UnknownSource applicability is not established[SUSE-SU-2021:3123-1]
Suselinux enterprise module for basesystem 15 sp3libcroco0.6.13-3.3.1UnknownSource applicability is not established[SUSE-SU-2021:3123-1]
Suselinux enterprise point of sale 11 sp3libcroco0.6.1-122.9.1UnknownSource applicability is not established[SUSE-SU-2021:14800-1]
Suselinux enterprise server 11 sp4-ltsslibcroco0.6.1-122.9.1UnknownSource applicability is not established[SUSE-SU-2021:14800-1]
Suselinux enterprise server 12 sp2-bcllibcroco0.6.11-12.6.45UnknownSource applicability is not established[SUSE-SU-2022:2909-1]
Suselinux enterprise server 12 sp3-bcllibcroco0.6.11-12.6.45UnknownSource applicability is not established[SUSE-SU-2022:2909-1]
Suselinux enterprise server 12 sp4-ltsslibcroco0.6.11-12.6.45UnknownSource applicability is not established[SUSE-SU-2022:2909-1]
Suselinux enterprise server 12 sp5libcroco0.6.11-12.6.45UnknownSource applicability is not established[SUSE-SU-2022:2909-1]
Suselinux enterprise server 15 sp1-bcllibcroco0.6.12-150000.4.6.2UnknownSource applicability is not established[SUSE-SU-2022:3493-1]
Suselinux enterprise server 15 sp1-ltsslibcroco0.6.12-150000.4.6.2UnknownSource applicability is not established[SUSE-SU-2022:3493-1]
Suselinux enterprise server 15-ltsslibcroco0.6.12-150000.4.6.2UnknownSource applicability is not established[SUSE-SU-2022:3493-1]
Suselinux enterprise server for sap applications 12 sp4libcroco0.6.11-12.6.45UnknownSource applicability is not established[SUSE-SU-2022:2909-1]
Suselinux enterprise server for sap applications 12 sp5libcroco0.6.11-12.6.45UnknownSource applicability is not established[SUSE-SU-2022:2909-1]
Suselinux enterprise server for sap applications 15libcroco0.6.12-150000.4.6.2UnknownSource applicability is not established[SUSE-SU-2022:3493-1]
Suselinux enterprise server for sap applications 15 sp1libcroco0.6.12-150000.4.6.2UnknownSource applicability is not established[SUSE-SU-2022:3493-1]
Suselinux enterprise software development kit 12 sp5libcroco0.6.11-12.6.45UnknownSource applicability is not established[SUSE-SU-2022:2909-1]
Suseopenstack cloud 9libcroco0.6.11-12.6.45UnknownSource applicability is not established[SUSE-SU-2022:2909-1]
Suseopenstack cloud crowbar 9libcroco0.6.11-12.6.45UnknownSource applicability is not established[SUSE-SU-2022:2909-1]
Ubuntu18.04gnome-shell3.26.1-0ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.26.1-0ubuntu5UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.26.1-0ubuntu6UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.26.2-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.26.2-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.26.2-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.27.91-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.27.92-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.28.0-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.28.0-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.28.0-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.28.0-0ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.28.0-0ubuntu5UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.28.1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.28.1-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.28.2-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.28.3+git20190124-0ubuntu18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.28.3+git20190124-0ubuntu18.04.2UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.28.3-0ubuntu0.18.04.2UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.28.3-0ubuntu0.18.04.3UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.28.3-0ubuntu0.18.04.4UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.28.4-0ubuntu18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.28.4-0ubuntu18.04.2UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.28.4-0ubuntu18.04.3UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu18.04gnome-shell3.28.4-0ubuntu18.04.7UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntu20.04libcroco0.6.13-1UnknownSource applicability is not established[USN-6958-1][UBUNTU-CVE-2020-12825]
Ubuntu20.04libcroco0.6.13-1ubuntu0.1UnknownSource applicability is not established[USN-6958-1][UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.16.4-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.1-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.2-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.2-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.3-3ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.4-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.4-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.4-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.5-0ubuntu0.1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.5-0ubuntu0.2UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.5-0ubuntu0.3UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprognome-shell3.18.5-0ubuntu0.3+esm1UnknownSource applicability is not established[UBUNTU-CVE-2020-12825]
Ubuntuprolibcroco0.6.12-1UnknownSource applicability is not established[USN-6958-1][UBUNTU-CVE-2020-12825]
Ubuntuprolibcroco0.6.12-2UnknownSource applicability is not established[USN-6958-1][UBUNTU-CVE-2020-12825]
Ubuntuprolibcroco0.6.12-2ubuntu0.1~esm1UnknownSource applicability is not established[USN-6958-1][UBUNTU-CVE-2020-12825]
Ubuntuprolibcroco0.6.8-2UnknownSource applicability is not established[USN-6958-1]
Ubuntuprolibcroco0.6.8-2ubuntu1UnknownSource applicability is not established[USN-6958-1]
Ubuntuprolibcroco0.6.8-2ubuntu1+esm1UnknownSource applicability is not established[USN-6958-1]
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "libcroco",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.8-2ubuntu1+esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "0.6.8-2",
        "0.6.8-2ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-6958-1",
      "fixed_version": "0.6.8-2ubuntu1+esm1",
      "provider_source": "pypi",
      "provider_record_id": "USN-6958-1",
      "provider_updated_at": "2026-06-29T13:51:14.592718785Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.12-2ubuntu0.1~esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "0.6.12-1",
        "0.6.12-2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-6958-1",
      "fixed_version": "0.6.12-2ubuntu0.1~esm1",
      "provider_source": "pypi",
      "provider_record_id": "USN-6958-1",
      "provider_updated_at": "2026-06-29T13:51:14.592718785Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.13-1ubuntu0.1"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "0.6.13-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-6958-1",
      "fixed_version": "0.6.13-1ubuntu0.1",
      "provider_source": "pypi",
      "provider_record_id": "USN-6958-1",
      "provider_updated_at": "2026-06-29T13:51:14.592718785Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.12-2ubuntu0.1~esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "0.6.12-1",
        "0.6.12-2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-12825",
      "fixed_version": "0.6.12-2ubuntu0.1~esm1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-12825",
      "provider_updated_at": "2026-04-22T12:29:01.720926Z",
      "applicability_unknown": true
    },
    {
      "name": "gnome-shell",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "3.16.4-0ubuntu1",
        "3.18.1-1ubuntu1",
        "3.18.2-0ubuntu1",
        "3.18.2-0ubuntu2",
        "3.18.3-3ubuntu1",
        "3.18.4-0ubuntu1",
        "3.18.4-0ubuntu2",
        "3.18.4-0ubuntu3",
        "3.18.5-0ubuntu0.1",
        "3.18.5-0ubuntu0.2",
        "3.18.5-0ubuntu0.3",
        "3.18.5-0ubuntu0.3+esm1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-12825",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-12825",
      "provider_updated_at": "2026-04-22T12:29:01.720926Z",
      "applicability_unknown": true
    },
    {
      "name": "gnome-shell",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "3.26.1-0ubuntu4",
        "3.26.1-0ubuntu5",
        "3.26.1-0ubuntu6",
        "3.26.2-0ubuntu1",
        "3.26.2-0ubuntu2",
        "3.26.2-0ubuntu3",
        "3.27.91-0ubuntu1",
        "3.27.92-0ubuntu1",
        "3.28.0-0ubuntu1",
        "3.28.0-0ubuntu2",
        "3.28.0-0ubuntu3",
        "3.28.0-0ubuntu4",
        "3.28.0-0ubuntu5",
        "3.28.1-0ubuntu1",
        "3.28.1-0ubuntu2",
        "3.28.2-0ubuntu0.18.04.1",
        "3.28.3-0ubuntu0.18.04.2",
        "3.28.3-0ubuntu0.18.04.3",
        "3.28.3-0ubuntu0.18.04.4",
        "3.28.3+git20190124-0ubuntu18.04.1",
        "3.28.3+git20190124-0ubuntu18.04.2",
        "3.28.4-0ubuntu18.04.1",
        "3.28.4-0ubuntu18.04.2",
        "3.28.4-0ubuntu18.04.3",
        "3.28.4-0ubuntu18.04.7"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-12825",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-12825",
      "provider_updated_at": "2026-04-22T12:29:01.720926Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.13-1ubuntu0.1"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "0.6.13-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-12825",
      "fixed_version": "0.6.13-1ubuntu0.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-12825",
      "provider_updated_at": "2026-04-22T12:29:01.720926Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.13-3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3123-1",
      "fixed_version": "0.6.13-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3123-1",
      "provider_updated_at": "2026-02-04T04:33:06.709814Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.13-3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3123-1",
      "fixed_version": "0.6.13-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3123-1",
      "provider_updated_at": "2026-02-04T04:33:06.709814Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.13-3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3123-1",
      "fixed_version": "0.6.13-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3123-1",
      "provider_updated_at": "2026-02-04T04:33:06.709814Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.1-122.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise point of sale 11 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:14800-1",
      "fixed_version": "0.6.1-122.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:14800-1",
      "provider_updated_at": "2026-02-04T04:20:04.864275Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.1-122.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 11 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:14800-1",
      "fixed_version": "0.6.1-122.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:14800-1",
      "provider_updated_at": "2026-02-04T04:20:04.864275Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.12-150000.4.6.2"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3493-1",
      "fixed_version": "0.6.12-150000.4.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3493-1",
      "provider_updated_at": "2026-02-04T03:48:05.104356Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.12-150000.4.6.2"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3493-1",
      "fixed_version": "0.6.12-150000.4.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3493-1",
      "provider_updated_at": "2026-02-04T03:48:05.104356Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.12-150000.4.6.2"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3493-1",
      "fixed_version": "0.6.12-150000.4.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3493-1",
      "provider_updated_at": "2026-02-04T03:48:05.104356Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.12-150000.4.6.2"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3493-1",
      "fixed_version": "0.6.12-150000.4.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3493-1",
      "provider_updated_at": "2026-02-04T03:48:05.104356Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.12-150000.4.6.2"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3493-1",
      "fixed_version": "0.6.12-150000.4.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3493-1",
      "provider_updated_at": "2026-02-04T03:48:05.104356Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.12-150000.4.6.2"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3493-1",
      "fixed_version": "0.6.12-150000.4.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3493-1",
      "provider_updated_at": "2026-02-04T03:48:05.104356Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.12-150000.4.6.2"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3493-1",
      "fixed_version": "0.6.12-150000.4.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3493-1",
      "provider_updated_at": "2026-02-04T03:48:05.104356Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.12-150000.4.6.2"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3493-1",
      "fixed_version": "0.6.12-150000.4.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3493-1",
      "provider_updated_at": "2026-02-04T03:48:05.104356Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.12-150000.4.6.2"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3493-1",
      "fixed_version": "0.6.12-150000.4.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3493-1",
      "provider_updated_at": "2026-02-04T03:48:05.104356Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.12-150000.4.6.2"
            }
          ]
        }
      ],
      "release": "enterprise storage 6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3493-1",
      "fixed_version": "0.6.12-150000.4.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3493-1",
      "provider_updated_at": "2026-02-04T03:48:05.104356Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.13-3.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2021:3123-1",
      "fixed_version": "0.6.13-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2021:3123-1",
      "provider_updated_at": "2026-02-04T02:38:22.734627Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.11-12.6.45"
            }
          ]
        }
      ],
      "release": "openstack cloud 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2909-1",
      "fixed_version": "0.6.11-12.6.45",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2909-1",
      "provider_updated_at": "2026-02-04T02:35:31.291600Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.11-12.6.45"
            }
          ]
        }
      ],
      "release": "openstack cloud crowbar 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2909-1",
      "fixed_version": "0.6.11-12.6.45",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2909-1",
      "provider_updated_at": "2026-02-04T02:35:31.291600Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.11-12.6.45"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2909-1",
      "fixed_version": "0.6.11-12.6.45",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2909-1",
      "provider_updated_at": "2026-02-04T02:35:31.291600Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.11-12.6.45"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2909-1",
      "fixed_version": "0.6.11-12.6.45",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2909-1",
      "provider_updated_at": "2026-02-04T02:35:31.291600Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.11-12.6.45"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp2-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2909-1",
      "fixed_version": "0.6.11-12.6.45",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2909-1",
      "provider_updated_at": "2026-02-04T02:35:31.291600Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.11-12.6.45"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp3-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2909-1",
      "fixed_version": "0.6.11-12.6.45",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2909-1",
      "provider_updated_at": "2026-02-04T02:35:31.291600Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.11-12.6.45"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2909-1",
      "fixed_version": "0.6.11-12.6.45",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2909-1",
      "provider_updated_at": "2026-02-04T02:35:31.291600Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.11-12.6.45"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2909-1",
      "fixed_version": "0.6.11-12.6.45",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2909-1",
      "provider_updated_at": "2026-02-04T02:35:31.291600Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.11-12.6.45"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2909-1",
      "fixed_version": "0.6.11-12.6.45",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2909-1",
      "provider_updated_at": "2026-02-04T02:35:31.291600Z",
      "applicability_unknown": true
    },
    {
      "name": "libcroco",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.6.13-lp152.2.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2021:1294-1",
      "fixed_version": "0.6.13-lp152.2.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2021:1294-1",
      "provider_updated_at": "2026-02-04T02:31:10.930257Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

L’associazione dei pacchetti è in corso.

Osservato:

Riferimenti

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]