[ALSA-2023:0379] Important: libXpm security update
Type:
security
Severity:
important
Release date:
2023-03-13
Description:
X.Org X11 libXpm runtime library. Security Fix(es): * libXpm: compression commands depend on $PATH (CVE-2022-4883) * libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617) * libXpm: Infinite loop on unclosed comments (CVE-2022-46285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 libXpm-devel-3.5.12-9.el8_7.aarch64.rpm 2f0543bbdf0a6790c878019d175e637b8b53ce6f75d065298cd9ae3af7f36c8c
aarch64 libXpm-3.5.12-9.el8_7.aarch64.rpm 466bbc6a6f6ec8a117a83462626740799afe150379a44ff94ed60fd34cb6e571
i686 libXpm-3.5.12-9.el8_7.i686.rpm 3f1740643bf999eb4e8e767299800c7b1d7e8e6901e8788201b56037854d54ef
i686 libXpm-devel-3.5.12-9.el8_7.i686.rpm aaab6782231a31ce538f1b0a39a9a5d555bec9e970ebc32f8d591b1f5ba3d3d3
ppc64le libXpm-devel-3.5.12-9.el8_7.ppc64le.rpm 4ecf78b20300ef0b41a69e45325b6ce8c1f49f91efd9847179234df18d811a1f
ppc64le libXpm-3.5.12-9.el8_7.ppc64le.rpm bb8dce370874a8adedff68b6f0b2a4f60a9f7192c40393f81a0c653096394ab8
s390x libXpm-devel-3.5.12-9.el8_7.s390x.rpm af8773b75abf055e7f87e404eb87a2686458722f77068a20cbfa26133830f623
s390x libXpm-3.5.12-9.el8_7.s390x.rpm f3be09544337336e9f29580a6bd759d63580d15cca329a32dfdf03f6ef36ab9a
x86_64 libXpm-3.5.12-9.el8_7.x86_64.rpm 63faf3357a9a2cb89517c936435e5131f98b9435180a645ede31636472c71d3e
x86_64 libXpm-devel-3.5.12-9.el8_7.x86_64.rpm a96ee992c5678780a5997b318c9649c8723ee318c4076d04a53ae4ebcca2b859
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.