Bug#929945: cairo: CVE-2019-6462

[Salvatore Bonaccorso]

Source: cairo
Version: 1.16.0-4
Severity: important
Tags: security upstream
Forwarded: https://gitlab.freedesktop.org/cairo/cairo/issues/353
Control: found -1 1.14.8-1 

Hi,

The following vulnerability was published for cairo, filling for
tracking the issue.

CVE-2019-6462[0]:
| An issue was discovered in cairo 1.16.0. There is an infinite loop in
| the function _arc_error_normalized in the file cairo-arc.c, related to
| _arc_max_angle_for_tolerance_normalized.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2019-6462
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6462
[1] https://gitlab.freedesktop.org/cairo/cairo/issues/353

Regards,
Salvatore