USN-5807-3: libXpm vulnerability
Publication date
26 July 2023
Overview
libXpm could be made to denial of service if it received a specially crafted XPM file.
Releases
Packages
- libxpm - X11 pixmap library
Details
USN-5807-1 fixed a vulnerability in libXpm. This update provides
the corresponding update for Ubuntu 14.04 ESM.
Original advisory details:
Marco Ivaldi discovered that libXpm incorrectly handled certain XPM files.
If a user or automated system were tricked into opening a specially crafted
XPM file, a remote attacker could possibly use this issue to cause libXpm
to stop responding, resulting in a denial of service. (CVE-2022-46285)
USN-5807-1 fixed a vulnerability in libXpm. This update provides
the corresponding update for Ubuntu 14.04 ESM.
Original advisory details:
Marco Ivaldi discovered that libXpm incorrectly handled certain XPM files.
If a user or automated system were tricked into opening a specially crafted
XPM file, a remote attacker could possibly use this issue to cause libXpm
to stop responding, resulting in a denial of service. (CVE-2022-46285)
Update instructions
After a standard system update you need to restart your session to make all the necessary changes.
Learn more about how to get the fixes.The problem can be corrected by updating your system to the following package versions:
| Ubuntu Release | Package Version | ||
|---|---|---|---|
| 14.04 trusty | xpmutils – 1:3.5.10-1ubuntu0.1+esm1 | ||
| libxpm4 – 1:3.5.10-1ubuntu0.1+esm1 | |||
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.