Re: [BLFS Trac] #23175: libXpm-3.5.19 (Xorg library)

#23175: libXpm-3.5.19 (Xorg library)
-------------------------+-------------------------------
 Reporter:  Joe Locash   |       Owner:  SecurityAdvisory
     Type:  enhancement  |      Status:  new
 Priority:  elevated     |   Milestone:  13.1
Component:  BOOK         |     Version:  git
 Severity:  normal       |  Resolution:
 Keywords:               |
-------------------------+-------------------------------
Comment (by Douglas R. Reno):

 Offline copy of the security advisory:

 {{{
 ======================================================================
 X.Org Security Advisory: April 21, 2026

 Issue in libXpm prior to version 3.5.19
 ======================================================================

 An issue has been found in the libXpm library published by X.Org for which
 we are releasing a security fix for in libXpm-3.5.19.

 * CVE-2026-4367: libXpm Out-of-bounds read in xpmNextWord()

    libXpm uses a number of internal helper functions to parse the XPM file
    format.
    One of these internal functions, xpmNextString(), checks for the NULL
    terminator when looking for the end of the current string but not when
    looking for the beginning of the next string.
    A small XPM file with a malformed color table definition may cause the
    function xpmNextWord(), called from xpmParseColors() following a call
    to xpmNextString(), to start past the actual end of the file, causing
    an out-of-bound read.

    Introduced in: Unknown, prior to 3.5.5 (from Xorg 7.1)
    Fixed in: libXpm-3.5.19
    Fix: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/5448e1bd
    Found by: Naoki Wakamatsu
 }}}
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23175#comment:3>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page