SUSE-SU-2022:4249-1

Details

Description of the patch:

This update for pixman fixes the following issues:

CVE-2022-44638: Fixed an integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (bsc#1205033).

Affected Packages

libpixman-1-0

SUSE Linux Enterprise High Performance Computing 12 SP2SUSE Linux Enterprise High Performance Computing 12 SP3SUSE Linux Enterprise High Performance Computing 12 SP4SUSE Linux Enterprise High Performance Computing 12 SP5SUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

0:0.34.0-8.3.1

libpixman-1-0-32bit

SUSE Linux Enterprise High Performance Computing 12 SP2SUSE Linux Enterprise High Performance Computing 12 SP3SUSE Linux Enterprise High Performance Computing 12 SP4SUSE Linux Enterprise High Performance Computing 12 SP5SUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

0:0.34.0-8.3.1

libpixman-1-0-devel

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

0:0.34.0-8.3.1

References

ADVISORY

https://bugzilla.suse.com/1205033

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2022-November/013121.html

ADVISORY

https://www.suse.com/security/cve/CVE-2022-44638/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2022/suse-su-20224249-1/