Summary
[3.5.12-2]
- Fix CVE-2022-4883: compression commands depends on /usr/local/bin:/usr/bin (#2161715)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libXpm | 0:3.5.12-2.el7_9 |
| Oracle Linux · 7 | libXpm-devel | 0:3.5.12-2.el7_9 |
Vulnerabilities 1
-
High 8.8
A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to com…