pixman-0.38.4-3.el8_9

エラータID: AXSA:2024-7385:01

Release date: 
Monday, January 15, 2024 - 07:18
Subject: 
pixman-0.38.4-3.el8_9
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

Pixman is a pixel manipulation library for the X Window System and Cairo.

Security Fix(es):

pixman: Integer overflow in pixman_sample_floor_y leading to heap
out-of-bounds write (CVE-2022-44638)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE(s):
CVE-2022-44638

Solution: 

Update packages.

CVEs: 
CVE-2022-44638
In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow in pixman_sample_floor_y.
Additional Info: 

N/A

Download: 

SRPMS
  1. pixman-0.38.4-3.el8_9.src.rpm
    MD5: 26974ddd0acc5fe225ae94de3067f78a
    SHA-256: 64b4647650dc1152108d9bf350cb8d68b39d21d82a596196288b0caa3612591b
    Size: 752.75 kB

Asianux Server 8 for x86_64
  1. pixman-0.38.4-3.el8_9.i686.rpm
    MD5: 1c6f2ef119b43f4b71a7960fbd1c0cf6
    SHA-256: 0a5afcbf4022a92c7283f6875c4cbad2a86c817bfb62ce74ec83385dcd8c7f35
    Size: 270.25 kB
  2. pixman-0.38.4-3.el8_9.x86_64.rpm
    MD5: 6d3462b2896feb867be1cfd753c121d5
    SHA-256: 80fcf73a620e4c3d7e7322de6f913092a9243c2380945e3e2fca222de019acfe
    Size: 256.43 kB
  3. pixman-devel-0.38.4-3.el8_9.i686.rpm
    MD5: cec78025235b5bf5f3ebb7b9ca4cb390
    SHA-256: e37b51e8ec1b5219088b50852a241926b5e97fca548246a3b781557b78e43a4b
    Size: 19.22 kB
  4. pixman-devel-0.38.4-3.el8_9.x86_64.rpm
    MD5: a8f81e4744426f1f62818e66800be20b
    SHA-256: 986e0cf4d792bd6af67de75511bd871d57b45f07bd09986df2478d64c783536d
    Size: 19.20 kB