gpp_maybe Security update for libxpm

SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-171

This update for libXpm fixes the following issues: - CVE-2022-46285: Fixed an infinite loop that could be triggered when reading a XPM image with a C-style comment that is never closed (bsc#1207029). - CVE-2022-44617: Fixed an excessive resource consumption that could be triggered when reading small crafted XPM image (bsc#1207030). - CVE-2022-4883: Fixed an issue that made decompression commands susceptible to PATH environment variable manipulation attacks (bsc#1207031).

• Release Date
  Jan 26 2023
• References
  Bugzilla: 1207029, 1207031, 1207030
  CVEs: CVE-2022-44617, CVE-2022-46285, CVE-2022-4883
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Package Hub 15.4 x86_64

• Packages
  libXpm
  X Pixmap image file format library

  3.5.12-150000.3.7.2 lock src

  libXpm4-32bit
  X Pixmap image file format library

  3.5.12-150000.3.7.2 lock rpm