Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Security Measurement
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Insights
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Insights
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHSA-2023:0377 - Security Advisory
Issued:
2023-01-23
Updated:
2023-01-23

RHSA-2023:0377 - Security Advisory

  • Overview
  • Updated Packages

Synopsis

Important: libXpm security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libXpm is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The libXpm packages contain the X Pixmap parser library.

Security Fix(es):

  • libXpm: compression commands depend on $PATH (CVE-2022-4883)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Workstation 7 x86_64
  • Red Hat Enterprise Linux Desktop 7 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 7 s390x
  • Red Hat Enterprise Linux for Power, big endian 7 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 7 x86_64
  • Red Hat Enterprise Linux for Power, little endian 7 ppc64le
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 2160213 - CVE-2022-4883 libXpm: compression commands depend on $PATH

CVEs

  • CVE-2022-4883

References

  • https://access.redhat.com/security/updates/classification/#important
Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux Server 7

SRPM
libXpm-3.5.12-2.el7_9.src.rpm SHA-256: 42c482383a76ad33b5d76f64d233170f24c5c95d8b425399b55a2dad05bce828
x86_64
libXpm-3.5.12-2.el7_9.i686.rpm SHA-256: a85e2c781244fbd88d5964bb805baa4fd1be8c4cb61d6e593d453deed661e6ff
libXpm-3.5.12-2.el7_9.x86_64.rpm SHA-256: c9c62ca39b3ea544c82264c9d87c6cd88aa19a3c7cd548d61445ef3248cd525a
libXpm-debuginfo-3.5.12-2.el7_9.i686.rpm SHA-256: e83da42bbb0ab1041694c0bc44ae1b551608e351b880acdde4c5c7c60b084f0b
libXpm-debuginfo-3.5.12-2.el7_9.x86_64.rpm SHA-256: 409aced3c8b8dad7ef8c9ad16452b91d2f5448fe13b2706cf22f5ab65457770d
libXpm-devel-3.5.12-2.el7_9.i686.rpm SHA-256: bd16b516c1136a10778db0e2e25180b9eba76f606a13d2151ac3aa8377f1340c
libXpm-devel-3.5.12-2.el7_9.x86_64.rpm SHA-256: 5106abeb09e0ff241c59da8bd89b9c25ceb47cb38b29394c30a557725634b1ce

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
libXpm-3.5.12-2.el7_9.src.rpm SHA-256: 42c482383a76ad33b5d76f64d233170f24c5c95d8b425399b55a2dad05bce828
x86_64
libXpm-3.5.12-2.el7_9.i686.rpm SHA-256: a85e2c781244fbd88d5964bb805baa4fd1be8c4cb61d6e593d453deed661e6ff
libXpm-3.5.12-2.el7_9.x86_64.rpm SHA-256: c9c62ca39b3ea544c82264c9d87c6cd88aa19a3c7cd548d61445ef3248cd525a
libXpm-debuginfo-3.5.12-2.el7_9.i686.rpm SHA-256: e83da42bbb0ab1041694c0bc44ae1b551608e351b880acdde4c5c7c60b084f0b
libXpm-debuginfo-3.5.12-2.el7_9.x86_64.rpm SHA-256: 409aced3c8b8dad7ef8c9ad16452b91d2f5448fe13b2706cf22f5ab65457770d
libXpm-devel-3.5.12-2.el7_9.i686.rpm SHA-256: bd16b516c1136a10778db0e2e25180b9eba76f606a13d2151ac3aa8377f1340c
libXpm-devel-3.5.12-2.el7_9.x86_64.rpm SHA-256: 5106abeb09e0ff241c59da8bd89b9c25ceb47cb38b29394c30a557725634b1ce

Red Hat Enterprise Linux Workstation 7

SRPM
libXpm-3.5.12-2.el7_9.src.rpm SHA-256: 42c482383a76ad33b5d76f64d233170f24c5c95d8b425399b55a2dad05bce828
x86_64
libXpm-3.5.12-2.el7_9.i686.rpm SHA-256: a85e2c781244fbd88d5964bb805baa4fd1be8c4cb61d6e593d453deed661e6ff
libXpm-3.5.12-2.el7_9.x86_64.rpm SHA-256: c9c62ca39b3ea544c82264c9d87c6cd88aa19a3c7cd548d61445ef3248cd525a
libXpm-debuginfo-3.5.12-2.el7_9.i686.rpm SHA-256: e83da42bbb0ab1041694c0bc44ae1b551608e351b880acdde4c5c7c60b084f0b
libXpm-debuginfo-3.5.12-2.el7_9.x86_64.rpm SHA-256: 409aced3c8b8dad7ef8c9ad16452b91d2f5448fe13b2706cf22f5ab65457770d
libXpm-devel-3.5.12-2.el7_9.i686.rpm SHA-256: bd16b516c1136a10778db0e2e25180b9eba76f606a13d2151ac3aa8377f1340c
libXpm-devel-3.5.12-2.el7_9.x86_64.rpm SHA-256: 5106abeb09e0ff241c59da8bd89b9c25ceb47cb38b29394c30a557725634b1ce

Red Hat Enterprise Linux Desktop 7

SRPM
libXpm-3.5.12-2.el7_9.src.rpm SHA-256: 42c482383a76ad33b5d76f64d233170f24c5c95d8b425399b55a2dad05bce828
x86_64
libXpm-3.5.12-2.el7_9.i686.rpm SHA-256: a85e2c781244fbd88d5964bb805baa4fd1be8c4cb61d6e593d453deed661e6ff
libXpm-3.5.12-2.el7_9.x86_64.rpm SHA-256: c9c62ca39b3ea544c82264c9d87c6cd88aa19a3c7cd548d61445ef3248cd525a
libXpm-debuginfo-3.5.12-2.el7_9.i686.rpm SHA-256: e83da42bbb0ab1041694c0bc44ae1b551608e351b880acdde4c5c7c60b084f0b
libXpm-debuginfo-3.5.12-2.el7_9.i686.rpm SHA-256: e83da42bbb0ab1041694c0bc44ae1b551608e351b880acdde4c5c7c60b084f0b
libXpm-debuginfo-3.5.12-2.el7_9.x86_64.rpm SHA-256: 409aced3c8b8dad7ef8c9ad16452b91d2f5448fe13b2706cf22f5ab65457770d
libXpm-debuginfo-3.5.12-2.el7_9.x86_64.rpm SHA-256: 409aced3c8b8dad7ef8c9ad16452b91d2f5448fe13b2706cf22f5ab65457770d
libXpm-devel-3.5.12-2.el7_9.i686.rpm SHA-256: bd16b516c1136a10778db0e2e25180b9eba76f606a13d2151ac3aa8377f1340c
libXpm-devel-3.5.12-2.el7_9.x86_64.rpm SHA-256: 5106abeb09e0ff241c59da8bd89b9c25ceb47cb38b29394c30a557725634b1ce

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
libXpm-3.5.12-2.el7_9.src.rpm SHA-256: 42c482383a76ad33b5d76f64d233170f24c5c95d8b425399b55a2dad05bce828
s390x
libXpm-3.5.12-2.el7_9.s390.rpm SHA-256: 9e2b91445e52990ccd6c69bc0e2a5c8051a54c24462cef737529ddf9173c90f8
libXpm-3.5.12-2.el7_9.s390x.rpm SHA-256: 35fd83505e7b08244a733a446962a4c071c56fa23e943d692c89ca58eef39839
libXpm-debuginfo-3.5.12-2.el7_9.s390.rpm SHA-256: 78c3efc50558f8db0323d1b7f33c79205ac21ed49fadd0daac4ee13aa1d6e41f
libXpm-debuginfo-3.5.12-2.el7_9.s390x.rpm SHA-256: 717df1620f843d47c3493fb46abd69ef65566e3352a4cb57730c433bc75899ca
libXpm-devel-3.5.12-2.el7_9.s390.rpm SHA-256: d31d5842df972ff860a6a29285cf52d0fb8bc75f2d5825c63c280e5f833fbe0c
libXpm-devel-3.5.12-2.el7_9.s390x.rpm SHA-256: 7d16995d6dc233bc3e96abfc1489f4f313e55d7809cccdb69c70e1412b6c57fd

Red Hat Enterprise Linux for Power, big endian 7

SRPM
libXpm-3.5.12-2.el7_9.src.rpm SHA-256: 42c482383a76ad33b5d76f64d233170f24c5c95d8b425399b55a2dad05bce828
ppc64
libXpm-3.5.12-2.el7_9.ppc.rpm SHA-256: 451d98c933ef4443253c8ff2d315a4cb7de1d85bce203c89ce840b0fd3870143
libXpm-3.5.12-2.el7_9.ppc64.rpm SHA-256: eebb5eb64867e61eee427d4216af891eb365b135ddb790c39a1f22ce99ea63f9
libXpm-debuginfo-3.5.12-2.el7_9.ppc.rpm SHA-256: 1315a687a391b20edb766ac610e919d578cc9da66fd47e5c94c6dff64c879e73
libXpm-debuginfo-3.5.12-2.el7_9.ppc64.rpm SHA-256: 1f8617d890256a38405f56cc743372ced60a02164479abeda0e88ab52c91fac7
libXpm-devel-3.5.12-2.el7_9.ppc.rpm SHA-256: d5f6d014d40278a9f365763669484d226a3d1c0126d964181f040304ae399d75
libXpm-devel-3.5.12-2.el7_9.ppc64.rpm SHA-256: 51bcf8435a782af0a9fd819e3045c2e01907b9eec0919ca7ba3dc58b36598b7c

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
libXpm-3.5.12-2.el7_9.src.rpm SHA-256: 42c482383a76ad33b5d76f64d233170f24c5c95d8b425399b55a2dad05bce828
x86_64
libXpm-3.5.12-2.el7_9.i686.rpm SHA-256: a85e2c781244fbd88d5964bb805baa4fd1be8c4cb61d6e593d453deed661e6ff
libXpm-3.5.12-2.el7_9.x86_64.rpm SHA-256: c9c62ca39b3ea544c82264c9d87c6cd88aa19a3c7cd548d61445ef3248cd525a
libXpm-debuginfo-3.5.12-2.el7_9.i686.rpm SHA-256: e83da42bbb0ab1041694c0bc44ae1b551608e351b880acdde4c5c7c60b084f0b
libXpm-debuginfo-3.5.12-2.el7_9.i686.rpm SHA-256: e83da42bbb0ab1041694c0bc44ae1b551608e351b880acdde4c5c7c60b084f0b
libXpm-debuginfo-3.5.12-2.el7_9.x86_64.rpm SHA-256: 409aced3c8b8dad7ef8c9ad16452b91d2f5448fe13b2706cf22f5ab65457770d
libXpm-debuginfo-3.5.12-2.el7_9.x86_64.rpm SHA-256: 409aced3c8b8dad7ef8c9ad16452b91d2f5448fe13b2706cf22f5ab65457770d
libXpm-devel-3.5.12-2.el7_9.i686.rpm SHA-256: bd16b516c1136a10778db0e2e25180b9eba76f606a13d2151ac3aa8377f1340c
libXpm-devel-3.5.12-2.el7_9.x86_64.rpm SHA-256: 5106abeb09e0ff241c59da8bd89b9c25ceb47cb38b29394c30a557725634b1ce

Red Hat Enterprise Linux for Power, little endian 7

SRPM
libXpm-3.5.12-2.el7_9.src.rpm SHA-256: 42c482383a76ad33b5d76f64d233170f24c5c95d8b425399b55a2dad05bce828
ppc64le
libXpm-3.5.12-2.el7_9.ppc64le.rpm SHA-256: 0d03a514ae37de1c53a9c882616725208ef435dc3b560f8bae49d880418122cb
libXpm-debuginfo-3.5.12-2.el7_9.ppc64le.rpm SHA-256: 690bacbbf8ba65e5cb5d1bba740a36b9d77e602e3216162e0457b2b0a9abdda9
libXpm-devel-3.5.12-2.el7_9.ppc64le.rpm SHA-256: e954222feba4fff310435c7c65c9aeafc995f9bd071fb018f1810e1070e2f8f9

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
libXpm-3.5.12-2.el7_9.src.rpm SHA-256: 42c482383a76ad33b5d76f64d233170f24c5c95d8b425399b55a2dad05bce828
s390x
libXpm-3.5.12-2.el7_9.s390.rpm SHA-256: 9e2b91445e52990ccd6c69bc0e2a5c8051a54c24462cef737529ddf9173c90f8
libXpm-3.5.12-2.el7_9.s390x.rpm SHA-256: 35fd83505e7b08244a733a446962a4c071c56fa23e943d692c89ca58eef39839
libXpm-debuginfo-3.5.12-2.el7_9.s390.rpm SHA-256: 78c3efc50558f8db0323d1b7f33c79205ac21ed49fadd0daac4ee13aa1d6e41f
libXpm-debuginfo-3.5.12-2.el7_9.s390x.rpm SHA-256: 717df1620f843d47c3493fb46abd69ef65566e3352a4cb57730c433bc75899ca
libXpm-devel-3.5.12-2.el7_9.s390.rpm SHA-256: d31d5842df972ff860a6a29285cf52d0fb8bc75f2d5825c63c280e5f833fbe0c
libXpm-devel-3.5.12-2.el7_9.s390x.rpm SHA-256: 7d16995d6dc233bc3e96abfc1489f4f313e55d7809cccdb69c70e1412b6c57fd

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
libXpm-3.5.12-2.el7_9.src.rpm SHA-256: 42c482383a76ad33b5d76f64d233170f24c5c95d8b425399b55a2dad05bce828
ppc64
libXpm-3.5.12-2.el7_9.ppc.rpm SHA-256: 451d98c933ef4443253c8ff2d315a4cb7de1d85bce203c89ce840b0fd3870143
libXpm-3.5.12-2.el7_9.ppc64.rpm SHA-256: eebb5eb64867e61eee427d4216af891eb365b135ddb790c39a1f22ce99ea63f9
libXpm-debuginfo-3.5.12-2.el7_9.ppc.rpm SHA-256: 1315a687a391b20edb766ac610e919d578cc9da66fd47e5c94c6dff64c879e73
libXpm-debuginfo-3.5.12-2.el7_9.ppc64.rpm SHA-256: 1f8617d890256a38405f56cc743372ced60a02164479abeda0e88ab52c91fac7
libXpm-devel-3.5.12-2.el7_9.ppc.rpm SHA-256: d5f6d014d40278a9f365763669484d226a3d1c0126d964181f040304ae399d75
libXpm-devel-3.5.12-2.el7_9.ppc64.rpm SHA-256: 51bcf8435a782af0a9fd819e3045c2e01907b9eec0919ca7ba3dc58b36598b7c

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
libXpm-3.5.12-2.el7_9.src.rpm SHA-256: 42c482383a76ad33b5d76f64d233170f24c5c95d8b425399b55a2dad05bce828
ppc64le
libXpm-3.5.12-2.el7_9.ppc64le.rpm SHA-256: 0d03a514ae37de1c53a9c882616725208ef435dc3b560f8bae49d880418122cb
libXpm-debuginfo-3.5.12-2.el7_9.ppc64le.rpm SHA-256: 690bacbbf8ba65e5cb5d1bba740a36b9d77e602e3216162e0457b2b0a9abdda9
libXpm-devel-3.5.12-2.el7_9.ppc64le.rpm SHA-256: e954222feba4fff310435c7c65c9aeafc995f9bd071fb018f1810e1070e2f8f9

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2025 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility