SUSE-SU-2022:4206-1

Опубликовано: 23 нояб. 2022

Источник: suse-cvrf

Описание

Security update for pixman

This update for pixman fixes the following issues:

CVE-2022-44638: Fixed an integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (bsc#1205033).

Список пакетов

Container suse/sles/15.5/libguestfs-tools:0.58.0

libpixman-1-0-0.40.0-150400.3.3.1

Container suse/sles/15.5/virt-launcher:0.58.0

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-Hardened-BYOS

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-Hardened-BYOS-Azure

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-Hardened-BYOS-EC2

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-Hardened-BYOS-GCE

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP

libpixman-1-0-0.40.0-150400.3.3.1

libpixman-1-0-devel-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP-Azure

libpixman-1-0-0.40.0-150400.3.3.1

libpixman-1-0-devel-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP-BYOS

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP-BYOS-Azure

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP-BYOS-EC2

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP-BYOS-GCE

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP-EC2

libpixman-1-0-0.40.0-150400.3.3.1

libpixman-1-0-devel-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP-GCE

libpixman-1-0-0.40.0-150400.3.3.1

libpixman-1-0-devel-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP-Hardened

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP-Hardened-Azure

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP-Hardened-BYOS

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP-Hardened-EC2

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-SAP-Hardened-GCE

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-SAPCAL

libpixman-1-0-0.40.0-150400.3.3.1

libpixman-1-0-devel-0.40.0-150400.3.3.1

Image SLES15-SP4-SAPCAL-Azure

libpixman-1-0-0.40.0-150400.3.3.1

libpixman-1-0-devel-0.40.0-150400.3.3.1

Image SLES15-SP4-SAPCAL-EC2

libpixman-1-0-0.40.0-150400.3.3.1

libpixman-1-0-devel-0.40.0-150400.3.3.1

Image SLES15-SP4-SAPCAL-GCE

libpixman-1-0-0.40.0-150400.3.3.1

libpixman-1-0-devel-0.40.0-150400.3.3.1

Image SLES15-SP5-Hardened-BYOS-Azure

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP5-Hardened-BYOS-EC2

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP5-Hardened-BYOS-GCE

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP5-SAP-Azure

libpixman-1-0-0.40.0-150400.3.3.1

libpixman-1-0-devel-0.40.0-150400.3.3.1

Image SLES15-SP5-SAP-Azure-3P

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP5-SAP-BYOS-Azure

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP5-SAP-BYOS-EC2

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP5-SAP-BYOS-GCE

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP5-SAP-EC2

libpixman-1-0-0.40.0-150400.3.3.1

libpixman-1-0-devel-0.40.0-150400.3.3.1

Image SLES15-SP5-SAP-GCE

libpixman-1-0-0.40.0-150400.3.3.1

libpixman-1-0-devel-0.40.0-150400.3.3.1

Image SLES15-SP5-SAP-Hardened-Azure

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP5-SAP-Hardened-EC2

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP5-SAP-Hardened-GCE

libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP5-SAPCAL-Azure

libpixman-1-0-0.40.0-150400.3.3.1

libpixman-1-0-devel-0.40.0-150400.3.3.1

Image SLES15-SP5-SAPCAL-EC2

libpixman-1-0-0.40.0-150400.3.3.1

libpixman-1-0-devel-0.40.0-150400.3.3.1

Image SLES15-SP5-SAPCAL-GCE

libpixman-1-0-0.40.0-150400.3.3.1

libpixman-1-0-devel-0.40.0-150400.3.3.1

SUSE Linux Enterprise Micro 5.3

libpixman-1-0-0.40.0-150400.3.3.1

SUSE Linux Enterprise Module for Basesystem 15 SP4

libpixman-1-0-0.40.0-150400.3.3.1

libpixman-1-0-devel-0.40.0-150400.3.3.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP4

libpixman-1-0-32bit-0.40.0-150400.3.3.1

openSUSE Leap 15.4

libpixman-1-0-0.40.0-150400.3.3.1

libpixman-1-0-32bit-0.40.0-150400.3.3.1

libpixman-1-0-devel-0.40.0-150400.3.3.1

openSUSE Leap Micro 5.3

libpixman-1-0-0.40.0-150400.3.3.1

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20224206-1/
Link for SUSE-SU-2022:4206-1
https://lists.suse.com/pipermail/sle-security-updates/2022-November/013096.html
E-Mail link for SUSE-SU-2022:4206-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1205033
SUSE Bug 1205033
https://www.suse.com/security/cve/CVE-2022-44638/
SUSE CVE CVE-2022-44638 page

Описание

In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow in pixman_sample_floor_y.

Затронутые продукты

Container suse/sles/15.5/libguestfs-tools:0.58.0:libpixman-1-0-0.40.0-150400.3.3.1

Container suse/sles/15.5/virt-launcher:0.58.0:libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-Hardened-BYOS-Azure:libpixman-1-0-0.40.0-150400.3.3.1

Image SLES15-SP4-Hardened-BYOS-EC2:libpixman-1-0-0.40.0-150400.3.3.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-44638.html
CVE-2022-44638
https://bugzilla.suse.com/1205033
SUSE Bug 1205033
https://bugzilla.suse.com/1208313
SUSE Bug 1208313
https://bugzilla.suse.com/1208345
SUSE Bug 1208345
https://bugzilla.suse.com/1211497
SUSE Bug 1211497

SUSE-SU-2022:4206-1

Описание

Список пакетов

Container suse/sles/15.5/libguestfs-tools:0.58.0

Container suse/sles/15.5/virt-launcher:0.58.0

Image SLES15-SP4-Hardened-BYOS

Image SLES15-SP4-Hardened-BYOS-Azure

Image SLES15-SP4-Hardened-BYOS-EC2

Image SLES15-SP4-Hardened-BYOS-GCE

Image SLES15-SP4-SAP

Image SLES15-SP4-SAP-Azure

Image SLES15-SP4-SAP-Azure-LI-BYOS

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

Image SLES15-SP4-SAP-Azure-VLI-BYOS

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP4-SAP-BYOS

Image SLES15-SP4-SAP-BYOS-Azure

Image SLES15-SP4-SAP-BYOS-EC2

Image SLES15-SP4-SAP-BYOS-GCE

Image SLES15-SP4-SAP-EC2

Image SLES15-SP4-SAP-GCE

Image SLES15-SP4-SAP-Hardened

Image SLES15-SP4-SAP-Hardened-Azure

Image SLES15-SP4-SAP-Hardened-BYOS

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

Image SLES15-SP4-SAP-Hardened-EC2

Image SLES15-SP4-SAP-Hardened-GCE

Image SLES15-SP4-SAPCAL

Image SLES15-SP4-SAPCAL-Azure

Image SLES15-SP4-SAPCAL-EC2

Image SLES15-SP4-SAPCAL-GCE

Image SLES15-SP5-Hardened-BYOS-Azure

Image SLES15-SP5-Hardened-BYOS-EC2

Image SLES15-SP5-Hardened-BYOS-GCE

Image SLES15-SP5-SAP-Azure

Image SLES15-SP5-SAP-Azure-3P

Image SLES15-SP5-SAP-Azure-LI-BYOS

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

Image SLES15-SP5-SAP-Azure-VLI-BYOS

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP5-SAP-BYOS-Azure

Image SLES15-SP5-SAP-BYOS-EC2

Image SLES15-SP5-SAP-BYOS-GCE

Image SLES15-SP5-SAP-EC2

Image SLES15-SP5-SAP-GCE

Image SLES15-SP5-SAP-Hardened-Azure

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

Image SLES15-SP5-SAP-Hardened-EC2

Image SLES15-SP5-SAP-Hardened-GCE

Image SLES15-SP5-SAPCAL-Azure

Image SLES15-SP5-SAPCAL-EC2

Image SLES15-SP5-SAPCAL-GCE

SUSE Linux Enterprise Micro 5.3

SUSE Linux Enterprise Module for Basesystem 15 SP4

SUSE Linux Enterprise Module for Desktop Applications 15 SP4

openSUSE Leap 15.4

openSUSE Leap Micro 5.3

Ссылки

Уязвимость: CVE-2022-44638

Описание

Затронутые продукты

Ссылки