USN-5807-1 fixed vulnerabilities in libXpm. This update provides the
corresponding updates for Ubuntu 16.04 ESM.
Original advisory details:
Martin Ettl discovered that libXpm incorrectly handled certain XPM files.
If a user or automated system were tricked into opening a specially crafted
XPM file, a remote attacker could possibly use this issue to cause libXpm
to stop responding, resulting in a denial of service. (CVE-2022-44617)
Marco Ivaldi discovered that libXpm incorrectly handled certain XPM files.
If a user or automated system were tricked into opening a specially crafted
XPM file, a remote attacker could possibly use this issue to cause libXpm
to stop responding, resulting in a denial of service. (CVE-2022-46285)
Alan Coopersmith discovered that libXpm incorrectly handled calling
external helper binaries. If libXpm was being used by a setuid binary, a
local attacker could possibly use this issue to escalate privileges.
(CVE-2022-4883)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 16.04 | noarch | xpmutils | <Â 1:3.5.11-1ubuntu0.16.04.1+esm1 | UNKNOWN |
Ubuntu | 16.04 | noarch | libxpm-dev | <Â 1:3.5.11-1ubuntu0.16.04.1 | UNKNOWN |
Ubuntu | 16.04 | noarch | libxpm-dev-dbgsym | <Â 1:3.5.11-1ubuntu0.16.04.1 | UNKNOWN |
Ubuntu | 16.04 | noarch | libxpm4 | <Â 1:3.5.11-1ubuntu0.16.04.1 | UNKNOWN |
Ubuntu | 16.04 | noarch | libxpm4-dbg | <Â 1:3.5.11-1ubuntu0.16.04.1 | UNKNOWN |
Ubuntu | 16.04 | noarch | libxpm4-dbgsym | <Â 1:3.5.11-1ubuntu0.16.04.1 | UNKNOWN |
Ubuntu | 16.04 | noarch | xpmutils | <Â 1:3.5.11-1ubuntu0.16.04.1 | UNKNOWN |
Ubuntu | 16.04 | noarch | xpmutils-dbgsym | <Â 1:3.5.11-1ubuntu0.16.04.1 | UNKNOWN |
Ubuntu | 16.04 | noarch | libxpm4 | <Â 1:3.5.11-1ubuntu0.16.04.1+esm1 | UNKNOWN |