Red Hat Security Advisory

RHSA-2026:47072

Red Hat Hardened Images RPMs Security Update

Released 2026-07-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images libXpm-3.5.19-4.hum1@aarch64, libXpm-3.5.19-4.hum1@src, libXpm-3.5.19-4.hum1@x86_64 +2

Fixes 2 records

TI-2026-63394 CVE-2026-94287 · GHSA-ggh5-2m6x-59xg

Denial of service via unsigned underflow in libXpm's write path

LOW 24

A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00128 Published 2026-09-28 Partial fix · 3.5.19 CWE-1050

TI-2026-03803 CVE-2026-4367 · GHSA-c2rx-36v4-qc8g

Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing

LOW 24

A flaw was found in libXpm.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00129 Published 2026-06-16 Partial fix · 3.5.17-7.2.hum1, 3.5.19-4.hum1 CWE-125