USN-8600-1

Details

Naoki Wakamatsu discovered that libXpm did not properly validate file boundaries when processing XPM image files. An attacker could possibly use this issue to cause libXpm to crash, resulting in a denial of service.

Affected Packages

libxpm

Ubuntu 22.04 LTS

Fixed in:

1:3.5.12-1ubuntu0.22.04.3

libxpm

Ubuntu 24.04 LTS

Fixed in:

1:3.5.17-1ubuntu0.24.04.1

libxpm

Ubuntu 26.04 LTS

Fixed in:

1:3.5.17-1ubuntu0.26.04.1

References

REPORT

https://ubuntu.com/security/CVE-2026-4367

ADVISORY

https://ubuntu.com/security/notices/USN-8600-1