Advisories ยป MGASA-2018-0044

Updated wayland packages fix security vulnerability

Publication date: 03 Jan 2018
Modification date: 03 Jan 2018
Type: security
Affected Mageia releases : 5 , 6

Description

It is possible to trigger heap overflows due to an integer overflow while
parsing images. The integer overflow occurs because the chosen limit
0x10000 for dimensions is too large for 32 bit systems, because each pixel
takes 4 bytes. Properly chosen values allow an overflow which in turn will
lead to less allocated memory than needed for subsequent reads
(rhbz#1522638).
                

References

SRPMS

5/core

6/core