Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 891209 (CVE-2022-44617, CVE-2022-46285, CVE-2022-4883) - <x11-libs/libXpm-3.5.16: multiple vulnerabilities
Summary: <x11-libs/libXpm-3.5.16: multiple vulnerabilities
Alias: CVE-2022-44617, CVE-2022-46285, CVE-2022-4883
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
Whiteboard: A3 [glsa?]
Depends on: 907616
  Show dependency tree
Reported: 2023-01-17 17:18 UTC by John Helmert III
Modified: 2024-01-18 18:13 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2023-01-17 17:18:58 UTC
"1) CVE-2022-46285: Infinite loop on unclosed comments
2) CVE-2022-44617: Runaway loop on width of 0 and enormous height
3) CVE-2022-4883: compression commands depend on $PATH"

Please bump to 3.5.15.
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-02-05 16:46:19 UTC
ping. I did take a look at this but couldn't do it myself as was unsure what to do wrt new config options.
Comment 2 Larry the Git Cow gentoo-dev 2023-04-17 20:35:00 UTC
The bug has been referenced in the following commit(s):

commit 414462335909ac1cdfa276058238304228c7b129
Author:     Matt Turner <>
AuthorDate: 2023-04-17 20:33:54 +0000
Commit:     Matt Turner <>
CommitDate: 2023-04-17 20:34:56 +0000

    x11-libs/libXpm: Version bump to 3.5.16
    Signed-off-by: Matt Turner <>

 x11-libs/libXpm/Manifest             |  1 +
 x11-libs/libXpm/libXpm-3.5.16.ebuild | 41 ++++++++++++++++++++++++++++++++++++
 2 files changed, 42 insertions(+)
Comment 3 Matt Turner gentoo-dev 2024-01-18 18:13:53 UTC
commit 08bafdc67f518b3159d0ae291d6a8bfe29f95213
Author: Matt Turner <>
Date:   Mon Jun 5 11:30:22 2023 -0400

    x11-libs/libXpm: Drop old versions