Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Fixed packages 2

Vulnerabilities 2

• Medium 5.5
  CVE-2026-4367

  Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing

  A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `xpmNextWord()` function by processing a specially crafted or very small XPM (X PixMap) image file. This improper validation of file boundari…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Jun 16, 2026
• Medium 5.5
  CVE-2026-94287

  Denial of service via unsigned underflow in libXpm's write path

  A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.

  X.Org libXpm libxpm motif Debian Ubuntu Alpine
  Sep 28, 2026

References

• report
  https://access.redhat.com/security/cve/CVE-2026-4367
• article
  https://access.redhat.com/security/updates/classification/
• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2026-94287
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47072.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2448984
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-4367
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-4367
• article
  https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/5448e1bd
• article
  https://seclists.org/oss-sec/2026/q2/192
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2542381
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-94287
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-94287
• article
  https://gitlab.freedesktop.org/xorg/lib/libxpm/-/merge_requests/32/diffs?commit_id=3a68f818b1628d7ad96245b0f4d15a32a015b0ab