<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-02T12:09:27.113564+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/alsa-2023:0379</id>
    <title>ALSA-2023:0379 — Important: libXpm security update</title>
    <updated>2026-10-02T12:09:27.416457+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> AlmaLinux:8: libXpm, AlmaLinux:8: libXpm-devel</p>
<p>X.Org X11 libXpm runtime library.</p>
<p>Security Fix(es):</p>
<p>* libXpm: compression commands depend on $PATH (CVE-2022-4883)
* libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617)
* libXpm: Infinite loop on unclosed comments (CVE-2022-46285)</p>
<p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/alsa-2023:0379"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2023-00390</id>
    <title>bdu:2023-00390</title>
    <updated>2026-10-02T12:09:27.416521+00:00</updated>
    <content>bdu:2023-00390</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2023-00390"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bell-cve-2022-46285</id>
    <title>Withdrawn: BELL-CVE-2022-46285 — CVE-2022-46285 does not affect BellSoft software</title>
    <updated>2026-10-02T12:09:27.416539+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>
          <strong>Withdrawn by the publisher.</strong>
        </p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bell-cve-2022-46285"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2023-avi-0318</id>
    <title>certfr-2023-avi-0318 — De multiples vulnérabilités ont été découvertes dans &lt;span
class="textit"&gt;VMware&lt;/span&gt;. Elles permettent à un attaquan…</title>
    <updated>2026-10-02T12:09:27.416554+00:00</updated>
    <content>certfr-2023-avi-0318</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2023-avi-0318"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-224884</id>
    <title>EUVD-2026-224884</title>
    <updated>2026-10-02T12:09:27.416570+00:00</updated>
    <content>EUVD-2026-224884</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-224884"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2022-46285</id>
    <title>fkie_cve-2022-46285</title>
    <updated>2026-10-02T12:09:27.416582+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2022-46285"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-x5vr-48jx-h8wp</id>
    <title>GHSA-x5vr-48jx-h8wp</title>
    <updated>2026-10-02T12:09:27.416603+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-x5vr-48jx-h8wp"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2022-46285</id>
    <title>gsd-2022-46285</title>
    <updated>2026-10-02T12:09:27.416616+00:00</updated>
    <content>gsd-2022-46285</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2022-46285"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/msrc_cve-2022-46285</id>
    <title>msrc_CVE-2022-46285 — A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition…</title>
    <updated>2026-10-02T12:09:27.416626+00:00</updated>
    <content>msrc_CVE-2022-46285</content>
    <link href="https://cve.radiocsirt.org/vuln/msrc_cve-2022-46285"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oesa-2023-1078</id>
    <title>OESA-2023-1078 — libXpm security update</title>
    <updated>2026-10-02T12:09:27.416641+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: libXpm, openEuler:20.03-LTS-SP3: libXpm, openEuler:22.03-LTS: libXpm, openEuler:22.03-LTS-SP1: libXpm</p>
<p>X.Org X11 libXpm runtime library

Security Fix(es):

A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH environment variable.(CVE-2022-4883)

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library.(CVE-2022-44617)

A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.(CVE-2022-46285)</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/oesa-2023-1078"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2024:12617-1</id>
    <title>openSUSE-SU-2024:12617-1 — libXpm-devel-3.5.14-2.1 on GA media</title>
    <updated>2026-10-02T12:09:27.416670+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>libXpm-devel-3.5.14-2.1 on GA media</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2024:12617-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/rhsa-2023:0378</id>
    <title>RHSA-2023:0378 — Red Hat Security Advisory: libXpm security update</title>
    <updated>2026-10-02T12:09:27.416687+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>libXpm: compression commands depend on $PATH libXpm: Runaway loop on width of 0 and enormous height libXpm: Infinite loop on unclosed comments</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/rhsa-2023:0378"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/suse-su-2023:0165-1</id>
    <title>SUSE-SU-2023:0165-1 — Security update for libXpm</title>
    <updated>2026-10-02T12:09:27.416705+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for libXpm</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/suse-su-2023:0165-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-46285</id>
    <title>UBUNTU-CVE-2022-46285</title>
    <updated>2026-10-02T12:09:27.416718+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libxpm, Ubuntu:14.04:LTS: motif, Ubuntu:Pro:16.04:LTS: libxpm, Ubuntu:16.04:LTS: motif, Ubuntu:18.04:LTS: libxpm, Ubuntu:18.04:LTS: motif, Ubuntu:20.04:LTS: libxpm, Ubuntu:20.04:LTS: motif, Ubuntu:22.04:LTS: libxpm, Ubuntu:22.04:LTS: motif and 3 more</p>
<p>A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-46285"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0113</id>
    <title>WID-SEC-W-2023-0113 — X.Org X11: Mehrere Schwachstellen</title>
    <updated>2026-10-02T12:09:27.416750+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in X.Org X11 in libXpm ausnutzen, um einen Denial of Service Angriff durchzuführen oder seine Rechte zu erweitern.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0113"/>
  </entry>
</feed>
