Skip to content
OpenAdvisories
Medium ALAS2-2020-1450 1 CVE

Moderate: advancecomp security update (Amazon Linux 2)

Published Jul 14, 2020 · Updated Jul 17, 2020

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-9210: In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (There is also a heap-based buffer over-read.) 1684596: CVE-2019-9210 advancecomp: integer overflow in png_compress in pngex.cc

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 advancecomp 0:1.15-22.amzn2
Amazon Linux · 2 advancecomp-debuginfo 0:1.15-22.amzn2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2019-9210.html