ELSA-2023-0383 — Important: libXpm security update (Oracle Linux 9)

Summary

[3.5.13-8]
- Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
- Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
- Fix CVE-2022-4883: compression depends on /usr/local/bin:/usr/bin (#2160242)

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	libXpm	0:3.5.13-8.el9_1
Oracle Linux · 9	libXpm-devel	0:3.5.13-8.el9_1

Vulnerabilities 3

High 8.8

CVE-2022-4883

A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to com…

libxpm motif libxpm libxpm Debian Ubuntu Azure Linux Alpine

Feb 7, 2023
High 7.5

CVE-2022-44617

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will …

libxpm motif libxpm libxpm Debian Ubuntu Azure Linux Alpine Wolfi

Feb 6, 2023
High 7.5

CVE-2022-46285

A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition …

libxpm motif libxpm libxpm Debian Ubuntu Azure Linux Alpine

Feb 7, 2023

Important: libXpm security update (Oracle Linux 9)

Summary

Fixed packages 2

Vulnerabilities 3

A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to com…

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will …

A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition …