RHSA-2023:0379: Important: libXpm security update

Published Jan 23, 2023

Updated

X.Org X11 libXpm runtime library.Security Fix(es): libXpm: compression commands depend on $PATH (CVE-2022-4883) libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617) libXpm: Infinite loop on unclosed comments (CVE-2022-46285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

X.Org Libxpm

Remediation

Event History

Dec 5, 2024

Advisory Published

via Red Hat·04:24 AM

Data Sourced

via Red Hat·04:24 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2023:0379?

The vulnerability RHSA-2023:0379 has been classified with critical severity due to potential remote code execution and denial of service risks.

How do I fix RHSA-2023:0379?

To fix RHSA-2023:0379, you should update the libXpm package to the latest version provided by the vendor.

What vulnerabilities are addressed in RHSA-2023:0379?

RHSA-2023:0379 addresses multiple vulnerabilities in libXpm, including CVE-2022-4883, CVE-2022-44617, and CVE-2022-46285.

What are the potential impacts of RHSA-2023:0379?

The impacts of RHSA-2023:0379 include the potential for remote code execution, memory corruption, and denial of service due to infinite loops.

What software does RHSA-2023:0379 affect?

RHSA-2023:0379 specifically affects systems using the X.Org X11 libXpm runtime library.