Lucene search

K
redhatRedHatRHSA-2023:0380
HistoryJan 23, 2023 - 5:21 p.m.

(RHSA-2023:0380) Important: libXpm security update

2023-01-2317:21:36
access.redhat.com
14
rhsa-2023-0380
x.org x11
libxpm
security update
compression commands
runaway loop
infinite loop
cve-2022-4883
cve-2022-44617
cve-2022-46285
cvss score
references
unix

0.005 Low

EPSS

Percentile

77.1%

X.Org X11 libXpm runtime library.

Security Fix(es):

  • libXpm: compression commands depend on $PATH (CVE-2022-4883)

  • libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617)

  • libXpm: Infinite loop on unclosed comments (CVE-2022-46285)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.