Ubuntu 22.10 USN-5718-1 Critical: Pixman Remote Code Execution Risk

ubuntu

November 8, 2022

pixman could be made to crash or run programs if it processed specially crafted input.

Summary

pixman could be made to crash or run programs if it processed specially

crafted input.

Software Description:

- pixman: pixel-manipulation library for X and cairo

Details:

Maddie Stone discovered that pixman incorrectly handled certain memory

operations. A remote attacker could use this issue to cause pixman to

crash, resulting in a denial of service, or possibly execute arbitrary

code.

Topics Covered

security advisory denial of service remote code execution ubuntu pixman

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.10:
   libpixman-1-0                   0.40.0-1ubuntu0.22.10.1

Ubuntu 22.04 LTS:
   libpixman-1-0                   0.40.0-1ubuntu0.22.04.1

Ubuntu 20.04 LTS:
   libpixman-1-0                   0.38.4-0ubuntu2.1

Ubuntu 18.04 LTS:
   libpixman-1-0                   0.34.0-2ubuntu0.1

After a standard system update you need to restart your session to make all
the necessary changes.