Ubuntu: 2047-1 Moderate: Pixman Arithmetic Overflow Denial of Service

ubuntu

December 3, 2013

pixman could be made to crash if it opened a specially crafted file.

Summary

pixman could be made to crash if it opened a specially crafted file.

Software Description:

- pixman: pixel-manipulation library for X and cairo

Details:

Bryan Quigley discovered an integer underflow in pixman. If a user were

tricked into opening a specially crafted file, an attacker could cause a

denial of service via application crash.

Topics Covered

security advisory denial of service application crash ubuntu pixman

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.10:
  libpixman-1-0                   0.30.2-1ubuntu0.1

Ubuntu 13.04:
  libpixman-1-0                   0.28.2-0ubuntu1.1

Ubuntu 12.10:
  libpixman-1-0                   0.26.0-3ubuntu0.1

Ubuntu 12.04 LTS:
  libpixman-1-0                   0.24.4-1ubuntu0.1

After a standard system update you need to restart your session to make
all the necessary changes.