Security update for libXpm SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:0171-1 Final 1 1 2023-01-26T17:32:15Z current 2023-01-26T17:32:15Z 2023-01-26T17:32:15Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libXpm This update for libXpm fixes the following issues: - CVE-2022-46285: Fixed an infinite loop that could be triggered when reading a XPM image with a C-style comment that is never closed (bsc#1207029). - CVE-2022-44617: Fixed an excessive resource consumption that could be triggered when reading small crafted XPM image (bsc#1207030). - CVE-2022-4883: Fixed an issue that made decompression commands susceptible to PATH environment variable manipulation attacks (bsc#1207031). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/nginx:latest-2023-171,Container suse/rmt-nginx:latest-2023-171,Image SLES15-SP1-SAP-Azure-LI-BYOS-Production-2023-171,Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production-2023-171,Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2023-171,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2023-171,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2023-171,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2023-171,Image SLES15-SP4-SAP-2023-171,Image SLES15-SP4-SAP-Azure-2023-171,Image SLES15-SP4-SAP-Azure-LI-BYOS-2023-171,Image SLES15-SP4-SAP-Azure-LI-BYOS-Production-2023-171,Image SLES15-SP4-SAP-Azure-VLI-BYOS-2023-171,Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production-2023-171,Image SLES15-SP4-SAP-BYOS-2023-171,Image SLES15-SP4-SAP-BYOS-Azure-2023-171,Image SLES15-SP4-SAP-BYOS-EC2-2023-171,Image SLES15-SP4-SAP-BYOS-GCE-2023-171,Image SLES15-SP4-SAP-EC2-2023-171,Image SLES15-SP4-SAP-GCE-2023-171,Image SLES15-SP4-SAP-Hardened-2023-171,Image SLES15-SP4-SAP-Hardened-Azure-2023-171,Image SLES15-SP4-SAP-Hardened-BYOS-2023-171,Image SLES15-SP4-SAP-Hardened-BYOS-Azure-2023-171,Image SLES15-SP4-SAP-Hardened-BYOS-EC2-2023-171,Image SLES15-SP4-SAP-Hardened-BYOS-GCE-2023-171,Image SLES15-SP4-SAP-Hardened-EC2-2023-171,Image SLES15-SP4-SAP-Hardened-GCE-2023-171,Image SLES15-SP4-SAPCAL-2023-171,Image SLES15-SP4-SAPCAL-Azure-2023-171,Image SLES15-SP4-SAPCAL-EC2-2023-171,Image SLES15-SP4-SAPCAL-GCE-2023-171,Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-2023-171,Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2-2023-171,Image SLES15-SP5-SAP-Azure-2023-171,Image SLES15-SP5-SAP-Azure-LI-BYOS-2023-171,Image SLES15-SP5-SAP-Azure-LI-BYOS-Production-2023-171,Image SLES15-SP5-SAP-Azure-VLI-BYOS-2023-171,Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production-2023-171,Image SLES15-SP5-SAP-BYOS-Azure-2023-171,Image SLES15-SP5-SAP-BYOS-EC2-2023-171,Image SLES15-SP5-SAP-BYOS-GCE-2023-171,Image SLES15-SP5-SAP-EC2-2023-171,Image SLES15-SP5-SAP-GCE-2023-171,Image SLES15-SP5-SAP-Hardened-Azure-2023-171,Image SLES15-SP5-SAP-Hardened-BYOS-Azure-2023-171,Image SLES15-SP5-SAP-Hardened-BYOS-EC2-2023-171,Image SLES15-SP5-SAP-Hardened-BYOS-GCE-2023-171,Image SLES15-SP5-SAP-Hardened-EC2-2023-171,Image SLES15-SP5-SAP-Hardened-GCE-2023-171,Image SLES15-SP5-SAPCAL-Azure-2023-171,Image SLES15-SP5-SAPCAL-EC2-2023-171,Image SLES15-SP5-SAPCAL-GCE-2023-171,SUSE-2023-171,SUSE-SLE-Module-Basesystem-15-SP4-2023-171,SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-171,SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-171,SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-171,SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-171,SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-171,SUSE-SLE-Product-RT-15-SP3-2023-171,SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-171,SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-171,SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-171,SUSE-SLE-Product-SLES_SAP-15-SP1-2023-171,SUSE-SLE-Product-SLES_SAP-15-SP2-2023-171,SUSE-SLE-Product-SLES_SAP-15-SP3-2023-171,SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-171,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-171,SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-171,SUSE-SLE-Product-WE-15-SP4-2023-171,SUSE-Storage-6-2023-171,SUSE-Storage-7-2023-171,SUSE-Storage-7.1-2023-171,openSUSE-SLE-15.4-2023-171 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20230171-1/ Link for SUSE-SU-2023:0171-1 https://lists.suse.com/pipermail/sle-security-updates/2023-January/013549.html E-Mail link for SUSE-SU-2023:0171-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1207029 SUSE Bug 1207029 https://bugzilla.suse.com/1207030 SUSE Bug 1207030 https://bugzilla.suse.com/1207031 SUSE Bug 1207031 https://www.suse.com/security/cve/CVE-2022-44617/ SUSE CVE CVE-2022-44617 page https://www.suse.com/security/cve/CVE-2022-46285/ SUSE CVE CVE-2022-46285 page https://www.suse.com/security/cve/CVE-2022-4883/ SUSE CVE CVE-2022-4883 page Container suse/nginx:latest Container suse/rmt-nginx:latest Image SLES15-SP1-SAP-Azure-LI-BYOS-Production Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP4-SAP Image SLES15-SP4-SAP-Azure Image SLES15-SP4-SAP-Azure-LI-BYOS Image SLES15-SP4-SAP-Azure-LI-BYOS-Production Image SLES15-SP4-SAP-Azure-VLI-BYOS Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production Image SLES15-SP4-SAP-BYOS Image SLES15-SP4-SAP-BYOS-Azure Image SLES15-SP4-SAP-BYOS-EC2 Image SLES15-SP4-SAP-BYOS-GCE Image SLES15-SP4-SAP-EC2 Image SLES15-SP4-SAP-GCE Image SLES15-SP4-SAP-Hardened Image SLES15-SP4-SAP-Hardened-Azure Image SLES15-SP4-SAP-Hardened-BYOS Image SLES15-SP4-SAP-Hardened-BYOS-Azure Image SLES15-SP4-SAP-Hardened-BYOS-EC2 Image SLES15-SP4-SAP-Hardened-BYOS-GCE Image SLES15-SP4-SAP-Hardened-EC2 Image SLES15-SP4-SAP-Hardened-GCE Image SLES15-SP4-SAPCAL Image SLES15-SP4-SAPCAL-Azure Image SLES15-SP4-SAPCAL-EC2 Image SLES15-SP4-SAPCAL-GCE Image SLES15-SP4-SUSE-Rancher-Setup-BYOS Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2 Image SLES15-SP5-SAP-Azure Image SLES15-SP5-SAP-Azure-LI-BYOS Image SLES15-SP5-SAP-Azure-LI-BYOS-Production Image SLES15-SP5-SAP-Azure-VLI-BYOS Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production Image SLES15-SP5-SAP-BYOS-Azure Image SLES15-SP5-SAP-BYOS-EC2 Image SLES15-SP5-SAP-BYOS-GCE Image SLES15-SP5-SAP-EC2 Image SLES15-SP5-SAP-GCE Image SLES15-SP5-SAP-Hardened-Azure Image SLES15-SP5-SAP-Hardened-BYOS-Azure Image SLES15-SP5-SAP-Hardened-BYOS-EC2 Image SLES15-SP5-SAP-Hardened-BYOS-GCE Image SLES15-SP5-SAP-Hardened-EC2 Image SLES15-SP5-SAP-Hardened-GCE Image SLES15-SP5-SAPCAL-Azure Image SLES15-SP5-SAPCAL-EC2 Image SLES15-SP5-SAPCAL-GCE SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Package Hub 15 SP4 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.4 libXpm4-3.5.12-150000.3.7.2 libXpm-devel-3.5.12-150000.3.7.2 libXpm-devel-32bit-3.5.12-150000.3.7.2 libXpm-devel-64bit-3.5.12-150000.3.7.2 libXpm-tools-3.5.12-150000.3.7.2 libXpm4-32bit-3.5.12-150000.3.7.2 libXpm4-64bit-3.5.12-150000.3.7.2 libXpm4-3.5.12-150000.3.7.2 as a component of Container suse/nginx:latest libXpm4-3.5.12-150000.3.7.2 as a component of Container suse/rmt-nginx:latest libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production libXpm-devel-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP libXpm-devel-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-Azure libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-Azure libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS-Production libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-BYOS libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-BYOS-Azure libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-BYOS-EC2 libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-BYOS-GCE libXpm-devel-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-EC2 libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-EC2 libXpm-devel-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-GCE libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-GCE libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-Hardened libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-Hardened-Azure libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-Hardened-BYOS libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-Azure libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-EC2 libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-GCE libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-Hardened-EC2 libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAP-Hardened-GCE libXpm-devel-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAPCAL libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAPCAL libXpm-devel-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAPCAL-Azure libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAPCAL-Azure libXpm-devel-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAPCAL-EC2 libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAPCAL-EC2 libXpm-devel-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAPCAL-GCE libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SAPCAL-GCE libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SUSE-Rancher-Setup-BYOS libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2 libXpm-devel-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAP-Azure libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAP-Azure libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS-Production libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAP-BYOS-Azure libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAP-BYOS-EC2 libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAP-BYOS-GCE libXpm-devel-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAP-EC2 libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAP-EC2 libXpm-devel-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAP-GCE libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAP-GCE libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAP-Hardened-Azure libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-Azure libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-EC2 libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-GCE libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAP-Hardened-EC2 libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAP-Hardened-GCE libXpm-devel-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAPCAL-Azure libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAPCAL-Azure libXpm-devel-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAPCAL-EC2 libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAPCAL-EC2 libXpm-devel-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAPCAL-GCE libXpm4-3.5.12-150000.3.7.2 as a component of Image SLES15-SP5-SAPCAL-GCE libXpm-devel-3.5.12-150000.3.7.2 as a component of SUSE Enterprise Storage 6 libXpm4-3.5.12-150000.3.7.2 as a component of SUSE Enterprise Storage 6 libXpm-devel-3.5.12-150000.3.7.2 as a component of SUSE Enterprise Storage 7 libXpm4-3.5.12-150000.3.7.2 as a component of SUSE Enterprise Storage 7 libXpm-devel-3.5.12-150000.3.7.2 as a component of SUSE Enterprise Storage 7.1 libXpm4-3.5.12-150000.3.7.2 as a component of SUSE Enterprise Storage 7.1 libXpm-devel-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libXpm4-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libXpm-devel-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libXpm4-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libXpm-devel-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libXpm4-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libXpm-devel-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libXpm4-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libXpm-devel-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libXpm4-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libXpm4-32bit-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP4 libXpm-devel-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise Real Time 15 SP3 libXpm4-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise Real Time 15 SP3 libXpm-devel-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libXpm4-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libXpm-devel-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libXpm4-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libXpm-devel-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libXpm4-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libXpm-devel-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libXpm4-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libXpm-devel-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libXpm4-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libXpm-devel-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libXpm4-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libXpm-tools-3.5.12-150000.3.7.2 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 libXpm-devel-3.5.12-150000.3.7.2 as a component of SUSE Manager Proxy 4.2 libXpm4-3.5.12-150000.3.7.2 as a component of SUSE Manager Proxy 4.2 libXpm-devel-3.5.12-150000.3.7.2 as a component of SUSE Manager Retail Branch Server 4.2 libXpm4-3.5.12-150000.3.7.2 as a component of SUSE Manager Retail Branch Server 4.2 libXpm-devel-3.5.12-150000.3.7.2 as a component of SUSE Manager Server 4.2 libXpm4-3.5.12-150000.3.7.2 as a component of SUSE Manager Server 4.2 libXpm-devel-3.5.12-150000.3.7.2 as a component of openSUSE Leap 15.4 libXpm-devel-32bit-3.5.12-150000.3.7.2 as a component of openSUSE Leap 15.4 libXpm-tools-3.5.12-150000.3.7.2 as a component of openSUSE Leap 15.4 libXpm4-3.5.12-150000.3.7.2 as a component of openSUSE Leap 15.4 libXpm4-32bit-3.5.12-150000.3.7.2 as a component of openSUSE Leap 15.4 A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library. CVE-2022-44617 Container suse/nginx:latest:libXpm4-3.5.12-150000.3.7.2 Container suse/rmt-nginx:latest:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Azure-LI-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Azure-VLI-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Azure:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-BYOS-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-BYOS-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-BYOS-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-EC2:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-GCE:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-BYOS-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-BYOS-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL-Azure:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL-EC2:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL-GCE:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SUSE-Rancher-Setup-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Azure-LI-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Azure-VLI-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Azure:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-BYOS-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-BYOS-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-BYOS-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-EC2:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-GCE:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Hardened-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Hardened-BYOS-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Hardened-BYOS-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Hardened-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Hardened-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAPCAL-Azure:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP5-SAPCAL-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAPCAL-EC2:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP5-SAPCAL-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAPCAL-GCE:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP5-SAPCAL-GCE:libXpm4-3.5.12-150000.3.7.2 SUSE Enterprise Storage 6:libXpm-devel-3.5.12-150000.3.7.2 SUSE Enterprise Storage 6:libXpm4-3.5.12-150000.3.7.2 SUSE Enterprise Storage 7.1:libXpm-devel-3.5.12-150000.3.7.2 SUSE Enterprise Storage 7.1:libXpm4-3.5.12-150000.3.7.2 SUSE Enterprise Storage 7:libXpm-devel-3.5.12-150000.3.7.2 SUSE Enterprise Storage 7:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP4:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP4:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Module for Package Hub 15 SP4:libXpm4-32bit-3.5.12-150000.3.7.2 SUSE Linux Enterprise Real Time 15 SP3:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Real Time 15 SP3:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server 15 SP2-LTSS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server 15 SP2-LTSS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server 15 SP3-LTSS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server 15 SP3-LTSS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Workstation Extension 15 SP4:libXpm-tools-3.5.12-150000.3.7.2 SUSE Manager Proxy 4.2:libXpm-devel-3.5.12-150000.3.7.2 SUSE Manager Proxy 4.2:libXpm4-3.5.12-150000.3.7.2 SUSE Manager Retail Branch Server 4.2:libXpm-devel-3.5.12-150000.3.7.2 SUSE Manager Retail Branch Server 4.2:libXpm4-3.5.12-150000.3.7.2 SUSE Manager Server 4.2:libXpm-devel-3.5.12-150000.3.7.2 SUSE Manager Server 4.2:libXpm4-3.5.12-150000.3.7.2 openSUSE Leap 15.4:libXpm-devel-3.5.12-150000.3.7.2 openSUSE Leap 15.4:libXpm-devel-32bit-3.5.12-150000.3.7.2 openSUSE Leap 15.4:libXpm-tools-3.5.12-150000.3.7.2 openSUSE Leap 15.4:libXpm4-3.5.12-150000.3.7.2 openSUSE Leap 15.4:libXpm4-32bit-3.5.12-150000.3.7.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230171-1/ https://www.suse.com/security/cve/CVE-2022-44617.html CVE-2022-44617 https://bugzilla.suse.com/1207030 SUSE Bug 1207030 https://bugzilla.suse.com/1214751 SUSE Bug 1214751 A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library. CVE-2022-46285 Container suse/nginx:latest:libXpm4-3.5.12-150000.3.7.2 Container suse/rmt-nginx:latest:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Azure-LI-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Azure-VLI-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Azure:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-BYOS-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-BYOS-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-BYOS-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-EC2:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-GCE:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-BYOS-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-BYOS-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL-Azure:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL-EC2:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL-GCE:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SUSE-Rancher-Setup-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Azure-LI-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Azure-VLI-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Azure:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-BYOS-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-BYOS-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-BYOS-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-EC2:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-GCE:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Hardened-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Hardened-BYOS-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Hardened-BYOS-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Hardened-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Hardened-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAPCAL-Azure:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP5-SAPCAL-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAPCAL-EC2:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP5-SAPCAL-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAPCAL-GCE:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP5-SAPCAL-GCE:libXpm4-3.5.12-150000.3.7.2 SUSE Enterprise Storage 6:libXpm-devel-3.5.12-150000.3.7.2 SUSE Enterprise Storage 6:libXpm4-3.5.12-150000.3.7.2 SUSE Enterprise Storage 7.1:libXpm-devel-3.5.12-150000.3.7.2 SUSE Enterprise Storage 7.1:libXpm4-3.5.12-150000.3.7.2 SUSE Enterprise Storage 7:libXpm-devel-3.5.12-150000.3.7.2 SUSE Enterprise Storage 7:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP4:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP4:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Module for Package Hub 15 SP4:libXpm4-32bit-3.5.12-150000.3.7.2 SUSE Linux Enterprise Real Time 15 SP3:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Real Time 15 SP3:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server 15 SP2-LTSS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server 15 SP2-LTSS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server 15 SP3-LTSS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server 15 SP3-LTSS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Workstation Extension 15 SP4:libXpm-tools-3.5.12-150000.3.7.2 SUSE Manager Proxy 4.2:libXpm-devel-3.5.12-150000.3.7.2 SUSE Manager Proxy 4.2:libXpm4-3.5.12-150000.3.7.2 SUSE Manager Retail Branch Server 4.2:libXpm-devel-3.5.12-150000.3.7.2 SUSE Manager Retail Branch Server 4.2:libXpm4-3.5.12-150000.3.7.2 SUSE Manager Server 4.2:libXpm-devel-3.5.12-150000.3.7.2 SUSE Manager Server 4.2:libXpm4-3.5.12-150000.3.7.2 openSUSE Leap 15.4:libXpm-devel-3.5.12-150000.3.7.2 openSUSE Leap 15.4:libXpm-devel-32bit-3.5.12-150000.3.7.2 openSUSE Leap 15.4:libXpm-tools-3.5.12-150000.3.7.2 openSUSE Leap 15.4:libXpm4-3.5.12-150000.3.7.2 openSUSE Leap 15.4:libXpm4-32bit-3.5.12-150000.3.7.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230171-1/ https://www.suse.com/security/cve/CVE-2022-46285.html CVE-2022-46285 https://bugzilla.suse.com/1207029 SUSE Bug 1207029 https://bugzilla.suse.com/1214751 SUSE Bug 1214751 https://bugzilla.suse.com/1215682 SUSE Bug 1215682 https://bugzilla.suse.com/1215686 SUSE Bug 1215686 A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH environment variable. CVE-2022-4883 Container suse/nginx:latest:libXpm4-3.5.12-150000.3.7.2 Container suse/rmt-nginx:latest:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Azure-LI-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Azure-VLI-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Azure:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-BYOS-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-BYOS-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-BYOS-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-EC2:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-GCE:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-BYOS-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-BYOS-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP-Hardened:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAP:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL-Azure:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL-EC2:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL-GCE:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP4-SAPCAL:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP4-SUSE-Rancher-Setup-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Azure-LI-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Azure-VLI-BYOS:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Azure:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-BYOS-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-BYOS-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-BYOS-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-EC2:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-GCE:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Hardened-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Hardened-BYOS-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Hardened-BYOS-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Hardened-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAP-Hardened-GCE:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAPCAL-Azure:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP5-SAPCAL-Azure:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAPCAL-EC2:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP5-SAPCAL-EC2:libXpm4-3.5.12-150000.3.7.2 Image SLES15-SP5-SAPCAL-GCE:libXpm-devel-3.5.12-150000.3.7.2 Image SLES15-SP5-SAPCAL-GCE:libXpm4-3.5.12-150000.3.7.2 SUSE Enterprise Storage 6:libXpm-devel-3.5.12-150000.3.7.2 SUSE Enterprise Storage 6:libXpm4-3.5.12-150000.3.7.2 SUSE Enterprise Storage 7.1:libXpm-devel-3.5.12-150000.3.7.2 SUSE Enterprise Storage 7.1:libXpm4-3.5.12-150000.3.7.2 SUSE Enterprise Storage 7:libXpm-devel-3.5.12-150000.3.7.2 SUSE Enterprise Storage 7:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP4:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Module for Basesystem 15 SP4:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Module for Package Hub 15 SP4:libXpm4-32bit-3.5.12-150000.3.7.2 SUSE Linux Enterprise Real Time 15 SP3:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Real Time 15 SP3:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server 15 SP1-LTSS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server 15 SP2-LTSS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server 15 SP2-LTSS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server 15 SP3-LTSS:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server 15 SP3-LTSS:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libXpm-devel-3.5.12-150000.3.7.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libXpm4-3.5.12-150000.3.7.2 SUSE Linux Enterprise Workstation Extension 15 SP4:libXpm-tools-3.5.12-150000.3.7.2 SUSE Manager Proxy 4.2:libXpm-devel-3.5.12-150000.3.7.2 SUSE Manager Proxy 4.2:libXpm4-3.5.12-150000.3.7.2 SUSE Manager Retail Branch Server 4.2:libXpm-devel-3.5.12-150000.3.7.2 SUSE Manager Retail Branch Server 4.2:libXpm4-3.5.12-150000.3.7.2 SUSE Manager Server 4.2:libXpm-devel-3.5.12-150000.3.7.2 SUSE Manager Server 4.2:libXpm4-3.5.12-150000.3.7.2 openSUSE Leap 15.4:libXpm-devel-3.5.12-150000.3.7.2 openSUSE Leap 15.4:libXpm-devel-32bit-3.5.12-150000.3.7.2 openSUSE Leap 15.4:libXpm-tools-3.5.12-150000.3.7.2 openSUSE Leap 15.4:libXpm4-3.5.12-150000.3.7.2 openSUSE Leap 15.4:libXpm4-32bit-3.5.12-150000.3.7.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230171-1/ https://www.suse.com/security/cve/CVE-2022-4883.html CVE-2022-4883 https://bugzilla.suse.com/1207031 SUSE Bug 1207031 https://bugzilla.suse.com/1208055 SUSE Bug 1208055 https://bugzilla.suse.com/1208351 SUSE Bug 1208351 https://bugzilla.suse.com/1208654 SUSE Bug 1208654 https://bugzilla.suse.com/1209322 SUSE Bug 1209322 https://bugzilla.suse.com/1209940 SUSE Bug 1209940