RHSA-2023:0381: Important: libXpm security update

Published Jan 23, 2023

Updated

X.Org X11 libXpm runtime library.Security Fix(es): libXpm: compression commands depend on $PATH (CVE-2022-4883) libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617) libXpm: Infinite loop on unclosed comments (CVE-2022-46285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

libXpm

Remediation

Event History

Mar 27, 2026

Advisory Published

via Red Hat·10:06 AM

Data Sourced

via Red Hat·10:06 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2023:0381?

The severity of RHSA-2023:0381 is classified as moderate.

How do I fix RHSA-2023:0381?

To fix RHSA-2023:0381, update the libXpm package to the latest version available from your distribution's package manager.

What vulnerabilities are addressed in RHSA-2023:0381?

RHSA-2023:0381 addresses vulnerabilities including CVE-2022-4883, CVE-2022-44617, and CVE-2022-46285.

Which systems are affected by RHSA-2023:0381?

RHSA-2023:0381 affects systems that utilize the X.Org X11 libXpm runtime library.

What can happen if RHSA-2023:0381 is not addressed?

If RHSA-2023:0381 is not addressed, systems may be at risk of denial of service attacks due to the described vulnerabilities.