Skip to content
OpenAdvisories
Medium ALAS2-2019-1370 1 CVE

Moderate: file security update (Amazon Linux 2)

Published Dec 13, 2019 · Updated Dec 18, 2019

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-18218: cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write). 1765272: CVE-2019-18218 file: heap-based buffer overflow in cdf_read_property_info in cdf.c

Fixed packages 6

ReleasePackageFixed in
Amazon Linux · 2 file 0:5.11-35.amzn2.0.2
Amazon Linux · 2 file-debuginfo 0:5.11-35.amzn2.0.2
Amazon Linux · 2 file-devel 0:5.11-35.amzn2.0.2
Amazon Linux · 2 file-libs 0:5.11-35.amzn2.0.2
Amazon Linux · 2 file-static 0:5.11-35.amzn2.0.2
Amazon Linux · 2 python-magic 0:5.11-35.amzn2.0.2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2019-18218.html