Skip to content
OpenAdvisories
Low ALAS2-2024-2449 1 CVE

Low: pcre2 security update (Amazon Linux 2)

Published Feb 1, 2024 · Updated Feb 1, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-41409: Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.

Fixed packages 7

ReleasePackageFixed in
Amazon Linux · 2 pcre2 0:10.23-11.amzn2.0.2
Amazon Linux · 2 pcre2-debuginfo 0:10.23-11.amzn2.0.2
Amazon Linux · 2 pcre2-devel 0:10.23-11.amzn2.0.2
Amazon Linux · 2 pcre2-static 0:10.23-11.amzn2.0.2
Amazon Linux · 2 pcre2-tools 0:10.23-11.amzn2.0.2
Amazon Linux · 2 pcre2-utf16 0:10.23-11.amzn2.0.2
Amazon Linux · 2 pcre2-utf32 0:10.23-11.amzn2.0.2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-41409.html