[Debian] CVE: CVE-2022-44638: pixman: an out-of-bounds write

[Yue Tao]

CVE-2022-44638: https://nvd.nist.gov/vuln/detail/CVE-2022-44638

Base Score: High

In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow in pixman_sample_floor_y.

References:

['libpixman-1-0_0.40.0-1_amd64.deb===>libpixman-1-0_0.40.0-1.1~deb11u1_amd64.deb', 'libpixman-1-dev_0.40.0-1_amd64.deb===>libpixman-1-dev_0.40.0-1.1~deb11u1_amd64.deb']

https://www.debian.org/security/2022/dsa-5276

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/starlingx/tools/+/884587

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/starlingx/tools/+/884587
Committed: https://opendev.org/starlingx/tools/commit/b1497f4be196385a96a14d22e28586c896213602
Submitter: "Zuul (22348)"
Branch: master

commit b1497f4be196385a96a14d22e28586c896213602
Author: Zhixiong Chi <email address hidden>
Date: Thu May 25 17:22:50 2023 +0800

    pixman: fix CVE-2022-44638

    Upgrade libpixman and libpixman-dev to 0.40.0-1.1~deb11u1

    Refer to:
    https://www.debian.org/security/2022/dsa-5276

    Test Plan:
    Pass: downloader
    Pass: build-pkgs --clean
    Pass: build-image
    Pass: Jenkins Installation
    PASS: dpkg -l |grep pixman
    ii libpixman-1-0:amd64 0.40.0-1.1~deb11u1

    Closes-Bug: 2020727

    Signed-off-by: Zhixiong Chi <email address hidden>
    Change-Id: I702e9579370f2e7f866be0e1e2ad6b9c098e8789