Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Security Measurement
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Insights
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Insights
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHSA-2020:4072 - Security Advisory
Issued:
2020-09-29
Updated:
2020-09-29

RHSA-2020:4072 - Security Advisory

  • Overview
  • Updated Packages

Synopsis

Moderate: libcroco security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libcroco is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The libcroco is a standalone Cascading Style Sheet level 2 (CSS2) parsing and manipulation library.

Security Fix(es):

  • libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c (CVE-2020-12825)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Workstation 7 x86_64
  • Red Hat Enterprise Linux Desktop 7 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 7 s390x
  • Red Hat Enterprise Linux for Power, big endian 7 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 7 x86_64
  • Red Hat Enterprise Linux for Power, little endian 7 ppc64le
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 1835377 - CVE-2020-12825 libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c

CVEs

  • CVE-2020-12825

References

  • https://access.redhat.com/security/updates/classification/#moderate
Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux Server 7

SRPM
libcroco-0.6.12-6.el7_9.src.rpm SHA-256: e48f020b625264c69b61823a577b2aee47ea4d9c8ca096b146e7e4dc950d92c2
x86_64
libcroco-0.6.12-6.el7_9.i686.rpm SHA-256: 9ead0a1b59c00d29d4aef65eaeb99a0b3bbe0b1a71040d705afc04eb04f0d556
libcroco-0.6.12-6.el7_9.x86_64.rpm SHA-256: f8826fc459108e03322d85188079f29c920ea454035666e4fd0f48a6c8e1b98c
libcroco-debuginfo-0.6.12-6.el7_9.i686.rpm SHA-256: 8636d7cd9c23f258c08de602fee315ddf016008fb9fe8648ea0fa46ed9741881
libcroco-debuginfo-0.6.12-6.el7_9.i686.rpm SHA-256: 8636d7cd9c23f258c08de602fee315ddf016008fb9fe8648ea0fa46ed9741881
libcroco-debuginfo-0.6.12-6.el7_9.x86_64.rpm SHA-256: 6c7bc9cea18117205218d481b48eb6f69d5ed27f988eff93ceccd8937442d9a8
libcroco-debuginfo-0.6.12-6.el7_9.x86_64.rpm SHA-256: 6c7bc9cea18117205218d481b48eb6f69d5ed27f988eff93ceccd8937442d9a8
libcroco-devel-0.6.12-6.el7_9.i686.rpm SHA-256: b063633aabb06965b3c2d17588b3d88a7e1b7be475ba9423407165427527a991
libcroco-devel-0.6.12-6.el7_9.x86_64.rpm SHA-256: c24ad4325e60810aa3a7a690543b994bda65317746c6ceab501810cad42057b8

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
libcroco-0.6.12-6.el7_9.src.rpm SHA-256: e48f020b625264c69b61823a577b2aee47ea4d9c8ca096b146e7e4dc950d92c2
x86_64
libcroco-0.6.12-6.el7_9.i686.rpm SHA-256: 9ead0a1b59c00d29d4aef65eaeb99a0b3bbe0b1a71040d705afc04eb04f0d556
libcroco-0.6.12-6.el7_9.x86_64.rpm SHA-256: f8826fc459108e03322d85188079f29c920ea454035666e4fd0f48a6c8e1b98c
libcroco-debuginfo-0.6.12-6.el7_9.i686.rpm SHA-256: 8636d7cd9c23f258c08de602fee315ddf016008fb9fe8648ea0fa46ed9741881
libcroco-debuginfo-0.6.12-6.el7_9.i686.rpm SHA-256: 8636d7cd9c23f258c08de602fee315ddf016008fb9fe8648ea0fa46ed9741881
libcroco-debuginfo-0.6.12-6.el7_9.x86_64.rpm SHA-256: 6c7bc9cea18117205218d481b48eb6f69d5ed27f988eff93ceccd8937442d9a8
libcroco-debuginfo-0.6.12-6.el7_9.x86_64.rpm SHA-256: 6c7bc9cea18117205218d481b48eb6f69d5ed27f988eff93ceccd8937442d9a8
libcroco-devel-0.6.12-6.el7_9.i686.rpm SHA-256: b063633aabb06965b3c2d17588b3d88a7e1b7be475ba9423407165427527a991
libcroco-devel-0.6.12-6.el7_9.x86_64.rpm SHA-256: c24ad4325e60810aa3a7a690543b994bda65317746c6ceab501810cad42057b8

Red Hat Enterprise Linux Workstation 7

SRPM
libcroco-0.6.12-6.el7_9.src.rpm SHA-256: e48f020b625264c69b61823a577b2aee47ea4d9c8ca096b146e7e4dc950d92c2
x86_64
libcroco-0.6.12-6.el7_9.i686.rpm SHA-256: 9ead0a1b59c00d29d4aef65eaeb99a0b3bbe0b1a71040d705afc04eb04f0d556
libcroco-0.6.12-6.el7_9.x86_64.rpm SHA-256: f8826fc459108e03322d85188079f29c920ea454035666e4fd0f48a6c8e1b98c
libcroco-debuginfo-0.6.12-6.el7_9.i686.rpm SHA-256: 8636d7cd9c23f258c08de602fee315ddf016008fb9fe8648ea0fa46ed9741881
libcroco-debuginfo-0.6.12-6.el7_9.i686.rpm SHA-256: 8636d7cd9c23f258c08de602fee315ddf016008fb9fe8648ea0fa46ed9741881
libcroco-debuginfo-0.6.12-6.el7_9.x86_64.rpm SHA-256: 6c7bc9cea18117205218d481b48eb6f69d5ed27f988eff93ceccd8937442d9a8
libcroco-debuginfo-0.6.12-6.el7_9.x86_64.rpm SHA-256: 6c7bc9cea18117205218d481b48eb6f69d5ed27f988eff93ceccd8937442d9a8
libcroco-devel-0.6.12-6.el7_9.i686.rpm SHA-256: b063633aabb06965b3c2d17588b3d88a7e1b7be475ba9423407165427527a991
libcroco-devel-0.6.12-6.el7_9.x86_64.rpm SHA-256: c24ad4325e60810aa3a7a690543b994bda65317746c6ceab501810cad42057b8

Red Hat Enterprise Linux Desktop 7

SRPM
libcroco-0.6.12-6.el7_9.src.rpm SHA-256: e48f020b625264c69b61823a577b2aee47ea4d9c8ca096b146e7e4dc950d92c2
x86_64
libcroco-0.6.12-6.el7_9.i686.rpm SHA-256: 9ead0a1b59c00d29d4aef65eaeb99a0b3bbe0b1a71040d705afc04eb04f0d556
libcroco-0.6.12-6.el7_9.x86_64.rpm SHA-256: f8826fc459108e03322d85188079f29c920ea454035666e4fd0f48a6c8e1b98c
libcroco-debuginfo-0.6.12-6.el7_9.i686.rpm SHA-256: 8636d7cd9c23f258c08de602fee315ddf016008fb9fe8648ea0fa46ed9741881
libcroco-debuginfo-0.6.12-6.el7_9.i686.rpm SHA-256: 8636d7cd9c23f258c08de602fee315ddf016008fb9fe8648ea0fa46ed9741881
libcroco-debuginfo-0.6.12-6.el7_9.x86_64.rpm SHA-256: 6c7bc9cea18117205218d481b48eb6f69d5ed27f988eff93ceccd8937442d9a8
libcroco-debuginfo-0.6.12-6.el7_9.x86_64.rpm SHA-256: 6c7bc9cea18117205218d481b48eb6f69d5ed27f988eff93ceccd8937442d9a8
libcroco-devel-0.6.12-6.el7_9.i686.rpm SHA-256: b063633aabb06965b3c2d17588b3d88a7e1b7be475ba9423407165427527a991
libcroco-devel-0.6.12-6.el7_9.x86_64.rpm SHA-256: c24ad4325e60810aa3a7a690543b994bda65317746c6ceab501810cad42057b8

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
libcroco-0.6.12-6.el7_9.src.rpm SHA-256: e48f020b625264c69b61823a577b2aee47ea4d9c8ca096b146e7e4dc950d92c2
s390x
libcroco-0.6.12-6.el7_9.s390.rpm SHA-256: 3c3c55aef61dd2da3a162047387cebd18c39b4e71c25fe63ed8b0611998ffda5
libcroco-0.6.12-6.el7_9.s390x.rpm SHA-256: 1a27584b579510ae01a056a8148527db33705f1e233006f7ca6391cc5629b1dc
libcroco-debuginfo-0.6.12-6.el7_9.s390.rpm SHA-256: e419127f1e75abe93ade938c49a9f04247e70066f8a4a736de11ce3e51299ecd
libcroco-debuginfo-0.6.12-6.el7_9.s390.rpm SHA-256: e419127f1e75abe93ade938c49a9f04247e70066f8a4a736de11ce3e51299ecd
libcroco-debuginfo-0.6.12-6.el7_9.s390x.rpm SHA-256: 20e6bfb8fb77839433adac44aebb04a64513d6613a74365225fdc07dedbbc4a8
libcroco-debuginfo-0.6.12-6.el7_9.s390x.rpm SHA-256: 20e6bfb8fb77839433adac44aebb04a64513d6613a74365225fdc07dedbbc4a8
libcroco-devel-0.6.12-6.el7_9.s390.rpm SHA-256: f65b3e0feb0695f8ad0dfdd0980c40b931270ac4a43fcfe5c059ac503fc113f4
libcroco-devel-0.6.12-6.el7_9.s390x.rpm SHA-256: 2922e5c3141198ae533fa426e4b5bd873f36d7f120033f90a613c90d1e85e670

Red Hat Enterprise Linux for Power, big endian 7

SRPM
libcroco-0.6.12-6.el7_9.src.rpm SHA-256: e48f020b625264c69b61823a577b2aee47ea4d9c8ca096b146e7e4dc950d92c2
ppc64
libcroco-0.6.12-6.el7_9.ppc.rpm SHA-256: 56a49b26790839c840130ffeb06e6d88664f4fba2bed9860679469a9661d3999
libcroco-0.6.12-6.el7_9.ppc64.rpm SHA-256: a4a04ccadb59a6f45d154f914c3d56c1bcbfd9d0a006dc5a94466836be8586f5
libcroco-debuginfo-0.6.12-6.el7_9.ppc.rpm SHA-256: 1fbffaa1b4a5cb62b7dd144410755d90ade56d1ad4a18b61c1ba5663f15208f3
libcroco-debuginfo-0.6.12-6.el7_9.ppc.rpm SHA-256: 1fbffaa1b4a5cb62b7dd144410755d90ade56d1ad4a18b61c1ba5663f15208f3
libcroco-debuginfo-0.6.12-6.el7_9.ppc64.rpm SHA-256: 707e4ad49344a6b651501efda1a31e14da4a87796e8d8453371b30982883309f
libcroco-debuginfo-0.6.12-6.el7_9.ppc64.rpm SHA-256: 707e4ad49344a6b651501efda1a31e14da4a87796e8d8453371b30982883309f
libcroco-devel-0.6.12-6.el7_9.ppc.rpm SHA-256: 0ef73343ac0374c7579b674a1378509c8bcf5150b17f304c377f8b7194fed0ab
libcroco-devel-0.6.12-6.el7_9.ppc64.rpm SHA-256: 4a8855ff986900e6222619cd370b457e3ba5e915f5d0550d5c35edc26c50d2ef

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
libcroco-0.6.12-6.el7_9.src.rpm SHA-256: e48f020b625264c69b61823a577b2aee47ea4d9c8ca096b146e7e4dc950d92c2
x86_64
libcroco-0.6.12-6.el7_9.i686.rpm SHA-256: 9ead0a1b59c00d29d4aef65eaeb99a0b3bbe0b1a71040d705afc04eb04f0d556
libcroco-0.6.12-6.el7_9.x86_64.rpm SHA-256: f8826fc459108e03322d85188079f29c920ea454035666e4fd0f48a6c8e1b98c
libcroco-debuginfo-0.6.12-6.el7_9.i686.rpm SHA-256: 8636d7cd9c23f258c08de602fee315ddf016008fb9fe8648ea0fa46ed9741881
libcroco-debuginfo-0.6.12-6.el7_9.i686.rpm SHA-256: 8636d7cd9c23f258c08de602fee315ddf016008fb9fe8648ea0fa46ed9741881
libcroco-debuginfo-0.6.12-6.el7_9.x86_64.rpm SHA-256: 6c7bc9cea18117205218d481b48eb6f69d5ed27f988eff93ceccd8937442d9a8
libcroco-debuginfo-0.6.12-6.el7_9.x86_64.rpm SHA-256: 6c7bc9cea18117205218d481b48eb6f69d5ed27f988eff93ceccd8937442d9a8
libcroco-devel-0.6.12-6.el7_9.i686.rpm SHA-256: b063633aabb06965b3c2d17588b3d88a7e1b7be475ba9423407165427527a991
libcroco-devel-0.6.12-6.el7_9.x86_64.rpm SHA-256: c24ad4325e60810aa3a7a690543b994bda65317746c6ceab501810cad42057b8

Red Hat Enterprise Linux for Power, little endian 7

SRPM
libcroco-0.6.12-6.el7_9.src.rpm SHA-256: e48f020b625264c69b61823a577b2aee47ea4d9c8ca096b146e7e4dc950d92c2
ppc64le
libcroco-0.6.12-6.el7_9.ppc64le.rpm SHA-256: e583554d8f75e2b7f3e4ef015a79b22019591125416b5623703a8414d37ed2d8
libcroco-debuginfo-0.6.12-6.el7_9.ppc64le.rpm SHA-256: 981a98304a0be89921b0ee9ff00ce893179157c97fc100bafb1dde28ab07334a
libcroco-debuginfo-0.6.12-6.el7_9.ppc64le.rpm SHA-256: 981a98304a0be89921b0ee9ff00ce893179157c97fc100bafb1dde28ab07334a
libcroco-devel-0.6.12-6.el7_9.ppc64le.rpm SHA-256: 722de8fac07772b0ed8204fee39c640b134879b5773a14c3fbbbf25a009cdfc2

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
libcroco-0.6.12-6.el7_9.src.rpm SHA-256: e48f020b625264c69b61823a577b2aee47ea4d9c8ca096b146e7e4dc950d92c2
s390x
libcroco-0.6.12-6.el7_9.s390.rpm SHA-256: 3c3c55aef61dd2da3a162047387cebd18c39b4e71c25fe63ed8b0611998ffda5
libcroco-0.6.12-6.el7_9.s390x.rpm SHA-256: 1a27584b579510ae01a056a8148527db33705f1e233006f7ca6391cc5629b1dc
libcroco-debuginfo-0.6.12-6.el7_9.s390.rpm SHA-256: e419127f1e75abe93ade938c49a9f04247e70066f8a4a736de11ce3e51299ecd
libcroco-debuginfo-0.6.12-6.el7_9.s390.rpm SHA-256: e419127f1e75abe93ade938c49a9f04247e70066f8a4a736de11ce3e51299ecd
libcroco-debuginfo-0.6.12-6.el7_9.s390x.rpm SHA-256: 20e6bfb8fb77839433adac44aebb04a64513d6613a74365225fdc07dedbbc4a8
libcroco-debuginfo-0.6.12-6.el7_9.s390x.rpm SHA-256: 20e6bfb8fb77839433adac44aebb04a64513d6613a74365225fdc07dedbbc4a8
libcroco-devel-0.6.12-6.el7_9.s390.rpm SHA-256: f65b3e0feb0695f8ad0dfdd0980c40b931270ac4a43fcfe5c059ac503fc113f4
libcroco-devel-0.6.12-6.el7_9.s390x.rpm SHA-256: 2922e5c3141198ae533fa426e4b5bd873f36d7f120033f90a613c90d1e85e670

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
libcroco-0.6.12-6.el7_9.src.rpm SHA-256: e48f020b625264c69b61823a577b2aee47ea4d9c8ca096b146e7e4dc950d92c2
ppc64
libcroco-0.6.12-6.el7_9.ppc.rpm SHA-256: 56a49b26790839c840130ffeb06e6d88664f4fba2bed9860679469a9661d3999
libcroco-0.6.12-6.el7_9.ppc64.rpm SHA-256: a4a04ccadb59a6f45d154f914c3d56c1bcbfd9d0a006dc5a94466836be8586f5
libcroco-debuginfo-0.6.12-6.el7_9.ppc.rpm SHA-256: 1fbffaa1b4a5cb62b7dd144410755d90ade56d1ad4a18b61c1ba5663f15208f3
libcroco-debuginfo-0.6.12-6.el7_9.ppc.rpm SHA-256: 1fbffaa1b4a5cb62b7dd144410755d90ade56d1ad4a18b61c1ba5663f15208f3
libcroco-debuginfo-0.6.12-6.el7_9.ppc64.rpm SHA-256: 707e4ad49344a6b651501efda1a31e14da4a87796e8d8453371b30982883309f
libcroco-debuginfo-0.6.12-6.el7_9.ppc64.rpm SHA-256: 707e4ad49344a6b651501efda1a31e14da4a87796e8d8453371b30982883309f
libcroco-devel-0.6.12-6.el7_9.ppc.rpm SHA-256: 0ef73343ac0374c7579b674a1378509c8bcf5150b17f304c377f8b7194fed0ab
libcroco-devel-0.6.12-6.el7_9.ppc64.rpm SHA-256: 4a8855ff986900e6222619cd370b457e3ba5e915f5d0550d5c35edc26c50d2ef

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
libcroco-0.6.12-6.el7_9.src.rpm SHA-256: e48f020b625264c69b61823a577b2aee47ea4d9c8ca096b146e7e4dc950d92c2
ppc64le
libcroco-0.6.12-6.el7_9.ppc64le.rpm SHA-256: e583554d8f75e2b7f3e4ef015a79b22019591125416b5623703a8414d37ed2d8
libcroco-debuginfo-0.6.12-6.el7_9.ppc64le.rpm SHA-256: 981a98304a0be89921b0ee9ff00ce893179157c97fc100bafb1dde28ab07334a
libcroco-debuginfo-0.6.12-6.el7_9.ppc64le.rpm SHA-256: 981a98304a0be89921b0ee9ff00ce893179157c97fc100bafb1dde28ab07334a
libcroco-devel-0.6.12-6.el7_9.ppc64le.rpm SHA-256: 722de8fac07772b0ed8204fee39c640b134879b5773a14c3fbbbf25a009cdfc2

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2025 Red Hat, Inc.

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility