Bug 879207 (CVE-2022-44638) – <x11-libs/pixman-0.42.2: heap overflow

• Product: Gentoo Security
• Status: RESOLVED FIXED

[Description John Helmert III 2022-11-02 19:25:35 UTC]

"This version contains a fix for a heap overflow. A CVE has been
requested, and I'll reply to this email with the number when it is
allocated."

Please stabilize when ready.

[Comment 1 John Helmert III 2022-12-03 18:49:50 UTC]

Please cleanup

[Comment 2 Larry the Git Cow 2022-12-04 02:41:26 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=104e80c2d86e169b7f8963b965fff79745e04d2b

commit 104e80c2d86e169b7f8963b965fff79745e04d2b
Author:     Matt Turner <[e-mail]>
AuthorDate: 2022-12-04 01:24:30 +0000
Commit:     Matt Turner <[e-mail]>
CommitDate: 2022-12-04 02:36:38 +0000

    x11-libs/pixman: Drop old versions
    
    Bug: https://bugs.gentoo.org/879207
    Signed-off-by: Matt Turner <[e-mail]>

 x11-libs/pixman/Manifest             |  1 -
 x11-libs/pixman/pixman-0.40.0.ebuild | 62 ------------------------------------
 2 files changed, 63 deletions(-)

[Comment 3 Larry the Git Cow 2024-07-01 06:10:10 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=9570e7e098f481b6fa1f2380f22ba0f3e3e44601

commit 9570e7e098f481b6fa1f2380f22ba0f3e3e44601
Author:     GLSAMaker <[e-mail]>
AuthorDate: 2024-07-01 05:56:53 +0000
Commit:     John Helmert III <[e-mail]>
CommitDate: 2024-07-01 06:09:19 +0000

    [ GLSA 202407-04 ] Pixman: Heap Buffer Overflow
    
    Bug: https://bugs.gentoo.org/879207
    Signed-off-by: GLSAMaker <[e-mail]>
    Signed-off-by: John Helmert III <[e-mail]>

 glsa-202407-04.xml | 42 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)