==========================================================================
Ubuntu Security Notice USN-5807-2 February 21, 2023 libxpm vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 ESM Summary: Several security issues were fixed in libXpm. Software Description: - libxpm: X11 pixmap library Details: USN-5807-1 fixed vulnerabilities in libXpm. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Martin Ettl discovered that libXpm incorrectly handled certain XPM files.If a user or automated system were tricked into opening a specially crafted
XPM file, a remote attacker could possibly use this issue to cause libXpm to stop responding, resulting in a denial of service. (CVE-2022-44617) Marco Ivaldi discovered that libXpm incorrectly handled certain XPM files.If a user or automated system were tricked into opening a specially crafted
XPM file, a remote attacker could possibly use this issue to cause libXpm to stop responding, resulting in a denial of service. (CVE-2022-46285) Alan Coopersmith discovered that libXpm incorrectly handled calling external helper binaries. If libXpm was being used by a setuid binary, a local attacker could possibly use this issue to escalate privileges. (CVE-2022-4883) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 ESM: libxpm4 1:3.5.11-1ubuntu0.16.04.1+esm1 xpmutils 1:3.5.11-1ubuntu0.16.04.1+esm1 After a standard system update you need to restart your session to make all the necessary changes. References:https://ubuntu.com/security/notices/USN-5807-2 <https://ubuntu.com/security/notices/USN-5807-2> https://ubuntu.com/security/notices/USN-5807-1 <https://ubuntu.com/security/notices/USN-5807-1>
CVE-2022-44617, CVE-2022-46285, CVE-2022-4883
OpenPGP_signature
Description: OpenPGP digital signature
