Oval Definition:oval:com.redhat.rhsa:def:20131869
Revision Date:2013-12-20Version:640
Title:RHSA-2013:1869: pixman security update (Important)
Description:Pixman is a pixel manipulation library for the X Window System and Cairo.

  • An integer overflow, which led to a heap-based buffer overflow, was found in the way pixman handled trapezoids. If a remote attacker could trick an application using pixman into rendering a trapezoid shape with specially crafted coordinates, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2013-6425)

    Users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. All applications using pixman must be restarted for this update to take effect.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2013-6425
    CVE-2013-6425
    RHSA-2013:1869
    RHSA-2013:1869-00
    RHSA-2013:1869-03
    Platform(s):Red Hat Enterprise Linux 5
    Red Hat Enterprise Linux 6
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • pixman is earlier than 0:0.22.0-2.2.el5_10
  • AND pixman is signed with Red Hat redhatrelease2 key
  • pixman-devel is earlier than 0:0.22.0-2.2.el5_10
  • AND pixman-devel is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 6 is installed
  • AND
  • pixman is earlier than 0:0.26.2-5.1.el6_5
  • AND pixman is signed with Red Hat redhatrelease2 key
  • pixman-devel is earlier than 0:0.26.2-5.1.el6_5
  • AND pixman-devel is signed with Red Hat redhatrelease2 key
  • BACK