[ALSA-2024:2217] Moderate: motif security update
Type:
security
Severity:
moderate
Release date:
2024-05-07
Description:
The motif packages include the Motif shared libraries needed to run applications which are dynamically linked against Motif, as well as MWM, the Motif Window Manager. Security Fix(es): * libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (CVE-2023-43788) * libXpm: out of bounds read on XPM with corrupted colormap (CVE-2023-43789) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 motif-devel-2.3.4-28.el9.aarch64.rpm 100b39e2e6e57354709a1b7706a5ec1491ed54a0a858f15e1b1903e4fcc6bbb2
aarch64 motif-2.3.4-28.el9.aarch64.rpm 8241e58a511ef289cfd5ec5c252ec91e0551ffcab874932403917128c2330560
i686 motif-2.3.4-28.el9.i686.rpm 0bccf948b337d045e94b2fddf2c0944c0a3236956dc88ff83764840607b1fab6
i686 motif-devel-2.3.4-28.el9.i686.rpm 2913644926cebcbe0acdf9ed77e515d0bbc0356b40a3138efd4efa40dbe918c7
ppc64le motif-devel-2.3.4-28.el9.ppc64le.rpm 4fbdb9e198d1fb2d12dcdc49bd1192ec69c4ec4df73399bb242b03438162cf19
ppc64le motif-2.3.4-28.el9.ppc64le.rpm 602d8a7bc8f241ee6f53dfa996fbe5a4fa47ee6cba393f4e6fe5ef973fd36bba
s390x motif-devel-2.3.4-28.el9.s390x.rpm 0cc6c6711f5ec59560f1cf709d20016f96a0a370257bb4f5b52e9623779e4ab4
s390x motif-2.3.4-28.el9.s390x.rpm 1aa10ee253604be8de839f1618693f34d5eaf3fbbcd80d870d517b91b2e9252b
x86_64 motif-devel-2.3.4-28.el9.x86_64.rpm e9024264302afc631e432449b582d37082756dd5d7177b9b3a43c7ef2ff46eba
x86_64 motif-2.3.4-28.el9.x86_64.rpm eb8775e67a68c7f9583b6515083f6ea245be3967f658e9d8090143b24d5413e8
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.