Summary
X.Org X11 libXpm runtime library.
Security Fix(es):
* libXpm: compression commands depend on $PATH (CVE-2022-4883)
* libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617)
* libXpm: Infinite loop on unclosed comments (CVE-2022-46285)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | libXpm | 3.5.12-9.el8_7 |
| AlmaLinux · 8 | libXpm-devel | 3.5.12-9.el8_7 |
Vulnerabilities 3
-
High 8.8
A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to com…
-
High 7.5
A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will …
-
High 7.5
A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition …
References
-
report
https://access.redhat.com/security/cve/CVE-2022-44617
-
report
https://access.redhat.com/security/cve/CVE-2022-46285
-
report
https://access.redhat.com/security/cve/CVE-2022-4883
-
report
https://bugzilla.redhat.com/2160092
-
report
https://bugzilla.redhat.com/2160193
-
report
https://bugzilla.redhat.com/2160213
-
advisory
https://errata.almalinux.org/8/ALSA-2023-0379.html