gpp_maybe Security update for libxpm

SUSE-SLE-SERVER-12-SP5-2023-165

This update for libXpm fixes the following issues: - CVE-2022-46285: Fixed an infinite loop that could be triggered when reading a XPM image with a C-style comment that is never closed (bsc#1207029). - CVE-2022-44617: Fixed an excessive resource consumption that could be triggered when reading small crafted XPM image (bsc#1207030). - CVE-2022-4883: Fixed an issue that made decompression commands susceptible to PATH environment variable manipulation attacks (bsc#1207031).

• Release Date
  Jan 26 2023
• References
  Bugzilla: 1207029, 1207031, 1207030
  CVEs: CVE-2022-44617, CVE-2022-4883, CVE-2022-46285
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 12.5 s390x

• Packages
  libXpm
  X Pixmap image file format library

  3.5.11-6.7.1

  lock src

  libXpm4
  X Pixmap image file format library

  3.5.11-6.7.1

  lock rpm

  libXpm4-32bit
  X Pixmap image file format library

  3.5.11-6.7.1

  lock rpm

SUSE Linux Enterprise Server 12.5 aarch64

• Packages
  libXpm
  X Pixmap image file format library

  3.5.11-6.7.1

  lock src

  libXpm4
  X Pixmap image file format library

  3.5.11-6.7.1

  lock rpm

SUSE Linux Enterprise Server 12.5 x86_64

• Packages
  libXpm
  X Pixmap image file format library

  3.5.11-6.7.1

  lock src

  libXpm4
  X Pixmap image file format library

  3.5.11-6.7.1

  lock rpm

  libXpm4-32bit
  X Pixmap image file format library

  3.5.11-6.7.1

  lock rpm

SUSE Linux Enterprise Server 12.5 ppc64le

• Packages
  libXpm
  X Pixmap image file format library

  3.5.11-6.7.1

  lock src

  libXpm4
  X Pixmap image file format library

  3.5.11-6.7.1

  lock rpm