ALT Linux Team

Package libpixman update in sisyphus_riscv64 on 2022-11-05

ALT-PU-2022-6924-1

Package libpixman updated to version 0.42.2-alt1 for branch sisyphus_riscv64.

Closed vulnerabilities

Published: 2022-11-03

BDU:2022-06667

Уязвимость функции rasterize_edges_8 библиотеки Pixman, позволяющая нарушителю выполнить произвольный код

Severity: HIGH (8.8) Vector: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References:
Published: 2022-11-03
Modified: 2024-11-21

CVE-2022-44638

In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow in pixman_sample_floor_y.

Severity: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top