Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Fixed packages 2

Vulnerabilities 1

• Medium 5.5
  CVE-2026-4367

  Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing

  A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `xpmNextWord()` function by processing a specially crafted or very small XPM (X PixMap) image file. This improper validation of file boundari…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Jun 16, 2026

References

• report
  https://access.redhat.com/security/cve/CVE-2026-4367
• article
  https://access.redhat.com/security/updates/classification/
• article
  https://images.redhat.com/
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_30354.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2448984
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-4367
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-4367
• article
  https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/5448e1bd
• article
  https://seclists.org/oss-sec/2026/q2/192