Amazon Linux 2 Security Advisory: ALAS-2025-2782
Advisory Release Date: 2025-02-26 22:35 Pacific
Advisory Updated Date: 2025-02-26 22:35 Pacific
Severity:
Medium
Issue Overview:
libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server. (CVE-2023-45924)
Affected Packages:
libglvnd
Note:
This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update libglvnd to update your system.
New Packages:
aarch64:
libglvnd-1.0.1-1.amzn2.0.2.aarch64
libglvnd-devel-1.0.1-1.amzn2.0.2.aarch64
libglvnd-core-devel-1.0.1-1.amzn2.0.2.aarch64
libglvnd-opengl-1.0.1-1.amzn2.0.2.aarch64
libglvnd-gles-1.0.1-1.amzn2.0.2.aarch64
libglvnd-egl-1.0.1-1.amzn2.0.2.aarch64
libglvnd-glx-1.0.1-1.amzn2.0.2.aarch64
libglvnd-debuginfo-1.0.1-1.amzn2.0.2.aarch64
i686:
libglvnd-1.0.1-1.amzn2.0.2.i686
libglvnd-devel-1.0.1-1.amzn2.0.2.i686
libglvnd-core-devel-1.0.1-1.amzn2.0.2.i686
libglvnd-opengl-1.0.1-1.amzn2.0.2.i686
libglvnd-gles-1.0.1-1.amzn2.0.2.i686
libglvnd-egl-1.0.1-1.amzn2.0.2.i686
libglvnd-glx-1.0.1-1.amzn2.0.2.i686
libglvnd-debuginfo-1.0.1-1.amzn2.0.2.i686
src:
libglvnd-1.0.1-1.amzn2.0.2.src
x86_64:
libglvnd-1.0.1-1.amzn2.0.2.x86_64
libglvnd-devel-1.0.1-1.amzn2.0.2.x86_64
libglvnd-core-devel-1.0.1-1.amzn2.0.2.x86_64
libglvnd-opengl-1.0.1-1.amzn2.0.2.x86_64
libglvnd-gles-1.0.1-1.amzn2.0.2.x86_64
libglvnd-egl-1.0.1-1.amzn2.0.2.x86_64
libglvnd-glx-1.0.1-1.amzn2.0.2.x86_64
libglvnd-debuginfo-1.0.1-1.amzn2.0.2.x86_64