Page 1 of 1

LibreOffice 7.5.5.1 and Pixman

Posted: Thu Jan 11, 2024 9:26 pm
by zmotiwala
Does Libreoffice use pixman to convert soffice files into pdfs?
Pixman has a security vulnerability, https://bugzilla.redhat.com/show_bug.cgi?id=2139988 I would like to understand if Libre Office is at risk.

Thank you

Re: Libre Office 7.5.5.1 and Pixman

Posted: Thu Jan 11, 2024 9:36 pm
by Bill
Is pixman installed on your system? It's not on mine.

Edit: I've found that libpixman is installed on my system, but I don't know if it would be used by LO since I've removed the version of LO installed by my distribution.

Re: Libre Office 7.5.5.1 and Pixman

Posted: Thu Jan 11, 2024 10:28 pm
by Hagar Delest
I don't think that LO would use such external libraries.
You should ask their mailing list. Very few developers here.

Re: Libre Office 7.5.5.1 and Pixman

Posted: Fri Jan 12, 2024 5:48 pm
by cwolan
Just a note:
the linked page states the bug was fixed in version Pixman 0.42.2

On the LibreOffice Gerrit (code review tool) one sees a reference to CVE-2022-44638

Re: Libre Office 7.5.5.1 and Pixman

Posted: Fri Jan 12, 2024 5:59 pm
by floris v
You can ask such questions at https://ask.libreoffice.org/, there are lots of developers active there who may be able to answer your question.

Re: Libre Office 7.5.5.1 and Pixman

Posted: Fri Jan 12, 2024 6:07 pm
by Hagar Delest
Then Pixman seems to be used by LO.
And it seems to be fixed in LO 7.4 branch.
No trace of that one in the LO bugzilla.

Re: LibreOffice 7.5.5.1 and Pixman

Posted: Fri Jan 12, 2024 6:44 pm
by RoryOF
Also asked at
https://ask.libreoffice.org/t/libreoffi ... man/100564

Knowing of the same query on another forum often saves duplication of effort in the re[lies.

Re: LibreOffice 7.5.5.1 and Pixman

Posted: Fri Jan 12, 2024 10:23 pm
by Hagar Delest
Strange, that topic says that LO doesn't use pixman and the link provided by cwolan hints otherwise.

Re: LibreOffice 7.5.5.1 and Pixman

Posted: Sat Jan 13, 2024 1:23 am
by robleyd
topic says that LO doesn't use pixman
My interpretation of the comment by erAck is that LO doesn't directly use pixman for the conversion process, rather it is done by cairo which uses some feature(s) of pixman.
https://pixman.org/ wrote:Pixman is a low-level software library for pixel manipulation, providing features such as image compositing and trapezoid rasterization. Important users of pixman are the cairo graphics library and the X server.

Re: LibreOffice 7.5.5.1 and Pixman

Posted: Sat Jan 13, 2024 10:26 am
by sveld
From what I know LibreOffice uses PDFium for PDF export and editing.
https://github.com/chromium/pdfium