CVE ID:	CVE-2022-4883
Description:	A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH environment variable.
Test IDs:	1.3.6.1.4.1.25623.1.0.884261   1.3.6.1.4.1.25623.1.1.1.2.2023.3459
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2022-4883 https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/515294bb8023a45ff91669 https://gitlab.freedesktop.org/xorg/lib/libxpm/-/merge_requests/9 https://lists.x.org/archives/xorg-announce/2023-January/003312.html https://bugzilla.redhat.com/show_bug.cgi?id=2160213 https://bugzilla.redhat.com/show_bug.cgi?id=2160213 https://lists.debian.org/debian-lts-announce/2023/06/msg00021.html