Amazon Linux 2 Security Advisory: ALASMATE-DESKTOP1.X-2023-001
Advisory Release Date: 2023-09-14 04:28 Pacific
Advisory Updated Date: 2023-09-25 22:09 Pacific
Severity:
Medium
Issue Overview:
An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation fault. This flaw affects DjVuLibre versions prior to 3.5.28. (CVE-2021-3630)
Affected Packages:
djvulibre
Note:
This advisory is applicable to Amazon Linux 2 - Mate-desktop1.x Extra. Visit this page to learn more about Amazon Linux 2 (AL2) Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update djvulibre to update your system.
New Packages:
aarch64:
djvulibre-3.5.27-30.amzn2.0.1.aarch64
djvulibre-libs-3.5.27-30.amzn2.0.1.aarch64
djvulibre-devel-3.5.27-30.amzn2.0.1.aarch64
djvulibre-debuginfo-3.5.27-30.amzn2.0.1.aarch64
src:
djvulibre-3.5.27-30.amzn2.0.1.src
x86_64:
djvulibre-3.5.27-30.amzn2.0.1.x86_64
djvulibre-libs-3.5.27-30.amzn2.0.1.x86_64
djvulibre-devel-3.5.27-30.amzn2.0.1.x86_64
djvulibre-debuginfo-3.5.27-30.amzn2.0.1.x86_64