Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 754
Alerts This Week
Warning Icon 1 754

Ubuntu 16.04: USN-5807-2 Critical: LibXpm Denial Of Service Threats

ubuntu
Calendar Grey February 21, 2023
Dist Ubuntu Esm H88
Multiple vulnerabilities in libXpm have been addressed in accordance with Ubuntu Security Notice USN-5807-2. Ensure your systems are secure!
Several security issues were fixed in libXpm.

Summary

Several security issues were fixed in libXpm.

Software Description:

- libxpm: X11 pixmap library

Details:

USN-5807-1 fixed vulnerabilities in libXpm. This update provides the

corresponding updates for Ubuntu 16.04 ESM.

Original advisory details:

 Martin Ettl discovered that libXpm incorrectly handled certain XPM files.

 If a user or automated system were tricked into opening a specially

crafted

 XPM file, a remote attacker could possibly use this issue to cause libXpm

 to stop responding, resulting in a denial of service. (CVE-2022-44617)

 Marco Ivaldi discovered that libXpm incorrectly handled certain XPM files.

 If a user or automated system were tricked into opening a specially

crafted

 XPM file, a remote attacker could possibly use this issue to cause libXpm

 to stop responding, resulting in a denial of service. (CVE-2022-46285)

 Alan Coopersmith discovered that libXpm incorrectly handled calling

 external helper binaries. ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service software update Ubuntu libXpm

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
   libxpm4                         1:3.5.11-1ubuntu0.16.04.1+esm1
   xpmutils                        1:3.5.11-1ubuntu0.16.04.1+esm1

After a standard system update you need to restart your session to make all
the necessary changes.

References

https://ubuntu.com/security/notices/USN-5807-2

https://ubuntu.com/security/notices/USN-5807-1

  CVE-2022-44617, CVE-2022-46285, CVE-2022-4883

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-5807-2

Topics%20covered

Topics Covered

security advisory denial of service software update Ubuntu libXpm

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.