Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-25051: objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_list).
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | aspell | 12:0.60.6.1-22.amzn2 |
| Amazon Linux · 2 | aspell-debuginfo | 12:0.60.6.1-22.amzn2 |
| Amazon Linux · 2 | aspell-devel | 12:0.60.6.1-22.amzn2 |
Vulnerabilities 1
-
Unscored —
objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::Stri…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2019-25051.html