RHSA-2024:2525: Moderate: mingw-pixman security update
Moderate: mingw-pixman security update
Other sources
Pixman is a pixel manipulation library for the X Window System and Cairo.Security Fix(es): pixman: Integer overflow in pixmansamplefloory leading to heap out-of-bounds write (CVE-2022-44638) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:2525?
The severity of RHSA-2024:2525 is classified as moderate.
What is the vulnerability described in RHSA-2024:2525?
RHSA-2024:2525 addresses an integer overflow issue in pixman_sample_floor_y that can lead to a heap out-of-bounds write, identified as CVE-2022-44638.
How do I fix RHSA-2024:2525?
To resolve RHSA-2024:2525, you should update the mingw-pixman package to version 0.42.2-3.el9 or later.
Which software does RHSA-2024:2525 affect?
RHSA-2024:2525 affects Red Hat CodeReady Linux Builder and packages like mingw-pixman, mingw32-pixman, and mingw64-pixman.
Is there a specific package version recommended for fixing RHSA-2024:2525?
Yes, the recommended package version for fixing RHSA-2024:2525 is specifically 0.42.2-3.el9.