Bug 879207 (CVE-2022-44638)

Summary:	<x11-libs/pixman-0.42.2: heap overflow
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	IN_PROGRESS ---
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://gitlab.freedesktop.org/pixman/pixman/-/issues/63
Whiteboard:	B2 [glsa?]
Package list:		Runtime testing required:	---
Bug Depends on:	880793
Bug Blocks:

Description John Helmert III archtester

2022-11-02 19:25:35 UTC

"This version contains a fix for a heap overflow. A CVE has been
requested, and I'll reply to this email with the number when it is
allocated."

Please stabilize when ready.

Comment 1 John Helmert III archtester

2022-12-03 18:49:50 UTC

Please cleanup

Comment 2 Larry the Git Cow gentoo-dev

2022-12-04 02:41:26 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=104e80c2d86e169b7f8963b965fff79745e04d2b

commit 104e80c2d86e169b7f8963b965fff79745e04d2b
Author:     Matt Turner <mattst88@gentoo.org>
AuthorDate: 2022-12-04 01:24:30 +0000
Commit:     Matt Turner <mattst88@gentoo.org>
CommitDate: 2022-12-04 02:36:38 +0000

    x11-libs/pixman: Drop old versions
    
    Bug: https://bugs.gentoo.org/879207
    Signed-off-by: Matt Turner <mattst88@gentoo.org>

 x11-libs/pixman/Manifest             |  1 -
 x11-libs/pixman/pixman-0.40.0.ebuild | 62 ------------------------------------
 2 files changed, 63 deletions(-)