Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-37535: GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | vte-profile | 0:0.52.2-2.amzn2.0.1 |
| Amazon Linux · 2 | vte291 | 0:0.52.2-2.amzn2.0.1 |
| Amazon Linux · 2 | vte291-debuginfo | 0:0.52.2-2.amzn2.0.1 |
| Amazon Linux · 2 | vte291-devel | 0:0.52.2-2.amzn2.0.1 |
Vulnerabilities 1
-
Medium 4.4
GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-37535.html