Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-20052: A possible remote information leak vulnerability in the DMG file parser. The issue affects versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. CVE-2023-20032: Possible remote code execution vulnerability in the ClamAV HFS+ file parser. The issue affects ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | clamav | 0:0.103.8-1.amzn2.0.1 |
| Amazon Linux · 2 | clamav-data | 0:0.103.8-1.amzn2.0.1 |
| Amazon Linux · 2 | clamav-debuginfo | 0:0.103.8-1.amzn2.0.1 |
| Amazon Linux · 2 | clamav-devel | 0:0.103.8-1.amzn2.0.1 |
| Amazon Linux · 2 | clamav-doc | 0:0.103.8-1.amzn2.0.1 |
| Amazon Linux · 2 | clamav-filesystem | 0:0.103.8-1.amzn2.0.1 |
| Amazon Linux · 2 | clamav-lib | 0:0.103.8-1.amzn2.0.1 |
| Amazon Linux · 2 | clamav-milter | 0:0.103.8-1.amzn2.0.1 |
| Amazon Linux · 2 | clamav-update | 0:0.103.8-1.amzn2.0.1 |
| Amazon Linux · 2 | clamd | 0:0.103.8-1.amzn2.0.1 |
Vulnerabilities 2
-
Critical 9.8CVE-2023-20032 EPSS 30%
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ …
-
Medium 5.3CVE-2023-20052 Public exploit
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG f…