Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-37290: GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | nautilus | 0:3.26.3.1-6.amzn2.0.1 |
| Amazon Linux · 2 | nautilus-debuginfo | 0:3.26.3.1-6.amzn2.0.1 |
| Amazon Linux · 2 | nautilus-devel | 0:3.26.3.1-6.amzn2.0.1 |
| Amazon Linux · 2 | nautilus-extensions | 0:3.26.3.1-6.amzn2.0.1 |
Vulnerabilities 1
-
Medium 5.5
GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-37290.html