[ALSA-2023:0379] Important: libXpm security update
Type:
security
Severity:
important
Release date:
2023-01-24
Description:
X.Org X11 libXpm runtime library. Security Fix(es): * libXpm: compression commands depend on $PATH (CVE-2022-4883) * libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617) * libXpm: Infinite loop on unclosed comments (CVE-2022-46285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages:
  • libXpm-3.5.12-9.el8_7.i686.rpm
  • libXpm-devel-3.5.12-9.el8_7.i686.rpm
  • libXpm-3.5.12-9.el8_7.x86_64.rpm
  • libXpm-devel-3.5.12-9.el8_7.x86_64.rpm
  • libXpm-devel-3.5.12-9.el8_7.aarch64.rpm
  • libXpm-3.5.12-9.el8_7.aarch64.rpm
  • libXpm-devel-3.5.12-9.el8_7.s390x.rpm
  • libXpm-3.5.12-9.el8_7.s390x.rpm
  • libXpm-devel-3.5.12-9.el8_7.ppc64le.rpm
  • libXpm-3.5.12-9.el8_7.ppc64le.rpm
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.