ALAS-2022-229

Amazon Linux 2022 Security Advisory: ALAS-2022-229
Advisory Release Date: 2022-12-06 16:42 Pacific
Advisory Updated Date: 2022-12-06 16:42 Pacific

Severity: Important

References: CVE-2022-20698 CVE-2022-20770 CVE-2022-20771 CVE-2022-20785 CVE-2022-20796
FAQs regarding Amazon Linux ALAS/CVE Severity

Issue Overview:

Affected Packages:

clamav

Issue Correction:
Run yum update clamav to update your system.

New Packages:

aarch64:
    clamd-debuginfo-0.103.7-1.amzn2022.0.2.aarch64
    clamav-update-debuginfo-0.103.7-1.amzn2022.0.2.aarch64
    clamav-milter-debuginfo-0.103.7-1.amzn2022.0.2.aarch64
    clamav-debuginfo-0.103.7-1.amzn2022.0.2.aarch64
    clamd-0.103.7-1.amzn2022.0.2.aarch64
    clamav-update-0.103.7-1.amzn2022.0.2.aarch64
    clamav-lib-debuginfo-0.103.7-1.amzn2022.0.2.aarch64
    clamav-lib-0.103.7-1.amzn2022.0.2.aarch64
    clamav-0.103.7-1.amzn2022.0.2.aarch64
    clamav-milter-0.103.7-1.amzn2022.0.2.aarch64
    clamav-devel-0.103.7-1.amzn2022.0.2.aarch64
    clamav-debugsource-0.103.7-1.amzn2022.0.2.aarch64

noarch:
    clamav-data-0.103.7-1.amzn2022.0.2.noarch
    clamav-filesystem-0.103.7-1.amzn2022.0.2.noarch

src:
    clamav-0.103.7-1.amzn2022.0.2.src

x86_64:
    clamd-debuginfo-0.103.7-1.amzn2022.0.2.x86_64
    clamav-update-0.103.7-1.amzn2022.0.2.x86_64
    clamav-lib-debuginfo-0.103.7-1.amzn2022.0.2.x86_64
    clamav-update-debuginfo-0.103.7-1.amzn2022.0.2.x86_64
    clamav-debuginfo-0.103.7-1.amzn2022.0.2.x86_64
    clamav-milter-debuginfo-0.103.7-1.amzn2022.0.2.x86_64
    clamav-debugsource-0.103.7-1.amzn2022.0.2.x86_64
    clamav-devel-0.103.7-1.amzn2022.0.2.x86_64
    clamav-0.103.7-1.amzn2022.0.2.x86_64
    clamav-lib-0.103.7-1.amzn2022.0.2.x86_64
    clamd-0.103.7-1.amzn2022.0.2.x86_64
    clamav-milter-0.103.7-1.amzn2022.0.2.x86_64

Additional References

Red Hat: CVE-2022-20698, CVE-2022-20770, CVE-2022-20771, CVE-2022-20785, CVE-2022-20796

Mitre: CVE-2022-20698, CVE-2022-20770, CVE-2022-20771, CVE-2022-20785, CVE-2022-20796