Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-3575: A heap-based buffer overflow was found in OpenJPEG. This flaw allows an attacker to execute arbitrary code with the permissions of the application compiled against OpenJPEG.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | openjpeg | 0:1.5.1-19.amzn2 |
| Amazon Linux · 2 | openjpeg-debuginfo | 0:1.5.1-19.amzn2 |
| Amazon Linux · 2 | openjpeg-devel | 0:1.5.1-19.amzn2 |
| Amazon Linux · 2 | openjpeg-libs | 0:1.5.1-19.amzn2 |
Vulnerabilities 1
-
Unscored —
A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-3575.html