Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Motif on AlmaLinux may read beyond memory
published 5 months ago
Summary
The Motif libraries supplied with AlmaLinux (motif, motif-devel, motif-static) contain a coding error that can cause a program to read data outside its safe memory area when processing certain XPM image files. This could lead to crashes or allow an attacker to execute code. Install the latest updates for these Motif packages as soon as they are available.
What to do
- Update almalinux motif to version 2.3.4-27.el9_2.tuxcare.els1.
- Update almalinux motif-devel to version 2.3.4-27.el9_2.tuxcare.els1.
- Update almalinux motif-static to version 2.3.4-27.el9_2.tuxcare.els1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:AlmaLinux:9.2 | almalinux | motif |
< 2.3.4-27.el9_2.tuxcare.els1 Fix: upgrade to 2.3.4-27.el9_2.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | motif-devel |
< 2.3.4-27.el9_2.tuxcare.els1 Fix: upgrade to 2.3.4-27.el9_2.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | motif-static |
< 2.3.4-27.el9_2.tuxcare.els1 Fix: upgrade to 2.3.4-27.el9_2.tuxcare.els1
|
Original advisory text
motif: Fix of 2 CVEs
- CVE-2023-43788: fix out of bounds read in XpmCreateXpmImageFromBuffer
- CVE-2023-43789: fix out of bounds read on XPM with corrupted colormap
- CVE-2023-43789: fix out of bounds read on XPM with corrupted colormap
References
Timeline
Published26 May 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1779823076 · OSV
Track software like this
Free during beta