Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-33065: Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | libsndfile | 0:1.0.25-12.amzn2.2.1 |
| Amazon Linux · 2 | libsndfile-debuginfo | 0:1.0.25-12.amzn2.2.1 |
| Amazon Linux · 2 | libsndfile-devel | 0:1.0.25-12.amzn2.2.1 |
| Amazon Linux · 2 | libsndfile-utils | 0:1.0.25-12.amzn2.2.1 |
Vulnerabilities 1
-
Unscored —
Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_heade…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-33065.html