Lucene search

K
centosCentOS ProjectCESA-2013:0687
HistoryMar 27, 2013 - 10:15 p.m.

pixman security update

2013-03-2722:15:17
CentOS Project
lists.centos.org
43

0.007 Low

EPSS

Percentile

79.8%

CentOS Errata and Security Advisory CESA-2013:0687

Pixman is a pixel manipulation library for the X Window System and Cairo.

An integer overflow flaw was discovered in one of pixman’s manipulation
routines. If a remote attacker could trick an application using pixman into
performing a certain manipulation, it could cause the application to crash
or, possibly, execute arbitrary code with the privileges of the user
running the application. (CVE-2013-1591)

Users are advised to upgrade to these updated packages, which contain
a backported patch to correct this issue. All applications using
pixman must be restarted for this update to take effect.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2013-March/081832.html

Affected packages:
pixman
pixman-devel

Upstream details at:
https://access.redhat.com/errata/RHSA-2013:0687