[Git][security-tracker-team/security-tracker][master] libxpm fixed in sid

Moritz Muehlenhoff (@jmm) jmm at debian.org
Thu Oct 5 15:32:58 BST 2023



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b05bd7b8 by Moritz Muehlenhoff at 2023-10-05T16:32:27+02:00
libxpm fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -386,11 +386,11 @@ CVE-2023-4911 (A buffer overflow was discovered in the GNU C Library's dynamic l
 	NOTE: Fixed by: https://sourceware.org/git/?p=glibc.git;a=commit;h=1056e5b4c3f2d90ed2b4a55f96add28da2f4c8fa
 	NOTE: https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt
 CVE-2023-43789 [libXpm: out of bounds read on XPM with corrupted colormap]
-	- libxpm <unfixed>
+	- libxpm 1:3.5.17-1
 	NOTE: https://www.openwall.com/lists/oss-security/2023/10/03/1
 	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/7e21cb63b9a1ca760a06cc4cd9b19bbc3fcd8f51
 CVE-2023-43788 [libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()]
-	- libxpm <unfixed>
+	- libxpm 1:3.5.17-1
 	NOTE: https://www.openwall.com/lists/oss-security/2023/10/03/1
 	NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/2fa554b01ef6079a9b35df9332bdc4f139ed67e0
 CVE-2023-43787 [ibX11: integer overflow in XCreateImage() leading to a heap overflow]



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b05bd7b84a4c33baf43c3f2abdf05054421e4501

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b05bd7b84a4c33baf43c3f2abdf05054421e4501
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231005/7e49fae6/attachment.htm>


More information about the debian-security-tracker-commits mailing list