Amazon Linux 2 Security Advisory: ALAS2MATE-DESKTOP1.X-2024-005
Advisory Released Date: 2024-01-09
Advisory Updated Date: 2024-01-09
Severity:
Medium
Issue Overview:
An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero. (CVE-2021-46312)
Affected Packages:
djvulibre
Note:
This advisory is applicable to Amazon Linux 2 - Mate-desktop1.x Extra. Visit this page to learn more about Amazon Linux 2 (AL2) Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update djvulibre to update your system.
New Packages:
aarch64:
djvulibre-3.5.27-30.amzn2.0.3.aarch64
djvulibre-libs-3.5.27-30.amzn2.0.3.aarch64
djvulibre-devel-3.5.27-30.amzn2.0.3.aarch64
djvulibre-debuginfo-3.5.27-30.amzn2.0.3.aarch64
i686:
djvulibre-3.5.27-30.amzn2.0.3.i686
djvulibre-libs-3.5.27-30.amzn2.0.3.i686
djvulibre-devel-3.5.27-30.amzn2.0.3.i686
djvulibre-debuginfo-3.5.27-30.amzn2.0.3.i686
src:
djvulibre-3.5.27-30.amzn2.0.3.src
x86_64:
djvulibre-3.5.27-30.amzn2.0.3.x86_64
djvulibre-libs-3.5.27-30.amzn2.0.3.x86_64
djvulibre-devel-3.5.27-30.amzn2.0.3.x86_64
djvulibre-debuginfo-3.5.27-30.amzn2.0.3.x86_64