Skip to content
OpenAdvisories
Low ALAS2-2023-1920 1 CVE

Low: util-linux security update (Amazon Linux 2)

Published Jan 30, 2023 · Updated Feb 4, 2023

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-37600: ** DISPUTED ** An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.

Fixed packages 15

ReleasePackageFixed in
Amazon Linux · 2 libblkid 0:2.30.2-2.amzn2.0.11
Amazon Linux · 2 libblkid-devel 0:2.30.2-2.amzn2.0.11
Amazon Linux · 2 libfdisk 0:2.30.2-2.amzn2.0.11
Amazon Linux · 2 libfdisk-devel 0:2.30.2-2.amzn2.0.11
Amazon Linux · 2 libmount 0:2.30.2-2.amzn2.0.11
Amazon Linux · 2 libmount-devel 0:2.30.2-2.amzn2.0.11
Amazon Linux · 2 libsmartcols 0:2.30.2-2.amzn2.0.11
Amazon Linux · 2 libsmartcols-devel 0:2.30.2-2.amzn2.0.11
Amazon Linux · 2 libuuid 0:2.30.2-2.amzn2.0.11
Amazon Linux · 2 libuuid-devel 0:2.30.2-2.amzn2.0.11
Amazon Linux · 2 python-libmount 0:2.30.2-2.amzn2.0.11
Amazon Linux · 2 util-linux 0:2.30.2-2.amzn2.0.11
Amazon Linux · 2 util-linux-debuginfo 0:2.30.2-2.amzn2.0.11
Amazon Linux · 2 util-linux-user 0:2.30.2-2.amzn2.0.11
Amazon Linux · 2 uuidd 0:2.30.2-2.amzn2.0.11

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-37600.html