Issued at: 2025-05-07
Updated at: 2025-10-17
Advisory content derived from
Red Hat RHSA-2024:2146,
© Red Hat, Inc., used under
CC BY 4.0, with modifications.
Synopsis
Moderate: libXpm security update
Description
X.Org X11 libXpm runtime library.
Security Fix(es):
* libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (CVE-2023-43788)
* libXpm: out of bounds read on XPM with corrupted colormap (CVE-2023-43789)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.
Affected products
Rocky Linux 9.6 aarch64
Rocky Linux 9.6 ppc64le
Rocky Linux 9.6 s390x
Rocky Linux 9.6 x86_64
Fixes
2242248
2242249
CVEs
CVE-2023-43788
CVE-2023-43789
Affected packages
Rocky Linux 9 aarch64 - AppStream
libXpm-0:3.5.13-10.el9.aarch64.rpm
libXpm-0:3.5.13-10.el9.src.rpm
libXpm-debuginfo-0:3.5.13-10.el9.aarch64.rpm
libXpm-debugsource-0:3.5.13-10.el9.aarch64.rpm
libXpm-devel-0:3.5.13-10.el9.aarch64.rpm
libXpm-devel-debuginfo-0:3.5.13-10.el9.aarch64.rpm
Rocky Linux 9 x86_64 - AppStream
libXpm-0:3.5.13-10.el9.i686.rpm
libXpm-0:3.5.13-10.el9.src.rpm
libXpm-0:3.5.13-10.el9.x86_64.rpm
libXpm-debuginfo-0:3.5.13-10.el9.x86_64.rpm
libXpm-debugsource-0:3.5.13-10.el9.x86_64.rpm
libXpm-devel-0:3.5.13-10.el9.i686.rpm
libXpm-devel-0:3.5.13-10.el9.x86_64.rpm
libXpm-devel-debuginfo-0:3.5.13-10.el9.x86_64.rpm
Rocky Linux 9 ppc64le - AppStream
libXpm-0:3.5.13-10.el9.ppc64le.rpm
libXpm-0:3.5.13-10.el9.src.rpm
libXpm-debuginfo-0:3.5.13-10.el9.ppc64le.rpm
libXpm-debugsource-0:3.5.13-10.el9.ppc64le.rpm
libXpm-devel-0:3.5.13-10.el9.ppc64le.rpm
libXpm-devel-debuginfo-0:3.5.13-10.el9.ppc64le.rpm
Rocky Linux 9 s390x - AppStream
libXpm-0:3.5.13-10.el9.s390x.rpm
libXpm-0:3.5.13-10.el9.src.rpm
libXpm-debuginfo-0:3.5.13-10.el9.s390x.rpm
libXpm-debugsource-0:3.5.13-10.el9.s390x.rpm
libXpm-devel-0:3.5.13-10.el9.s390x.rpm
libXpm-devel-debuginfo-0:3.5.13-10.el9.s390x.rpm