LibreOffice 7.5.5.1 and Pixman

[zmotiwala]

Does Libreoffice use pixman to convert soffice files into pdfs?
Pixman has a security vulnerability, https://bugzilla.redhat.com/show_bug.cgi?id=2139988 I would like to understand if Libre Office is at risk.

Thank you

[Bill]

Is pixman installed on your system? It's not on mine.

Edit: I've found that libpixman is installed on my system, but I don't know if it would be used by LO since I've removed the version of LO installed by my distribution.

[Hagar Delest]

I don't think that LO would use such external libraries.
You should ask their mailing list. Very few developers here.

[cwolan]

Just a note:
the linked page states the bug was fixed in version Pixman 0.42.2

On the LibreOffice Gerrit (code review tool) one sees a reference to CVE-2022-44638

[floris v]

You can ask such questions at https://ask.libreoffice.org/, there are lots of developers active there who may be able to answer your question.

[Hagar Delest]

Then Pixman seems to be used by LO.
And it seems to be fixed in LO 7.4 branch.
No trace of that one in the LO bugzilla.

[RoryOF]

Also asked at
https://ask.libreoffice.org/t/libreoffi ... man/100564

Knowing of the same query on another forum often saves duplication of effort in the re[lies.

[Hagar Delest]

Strange, that topic says that LO doesn't use pixman and the link provided by cwolan hints otherwise.

[robleyd]

topic says that LO doesn't use pixman

My interpretation of the comment by erAck is that LO doesn't directly use pixman for the conversion process, rather it is done by cairo which uses some feature(s) of pixman.

Pixman is a low-level software library for pixel manipulation, providing features such as image compositing and trapezoid rasterization. Important users of pixman are the cairo graphics library and the X server.

[sveld]

From what I know LibreOffice uses PDFium for PDF export and editing.
https://github.com/chromium/pdfium