Skip to content
OpenAdvisories
Medium ALAS2-2024-2617 1 CVE

Moderate: thunderbird security update (Amazon Linux 2)

Published Aug 1, 2024 · Updated Aug 13, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-6349: A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 thunderbird 0:115.12.1-1.amzn2.0.2
Amazon Linux · 2 thunderbird-debuginfo 0:115.12.1-1.amzn2.0.2

Vulnerabilities 1

  • Medium 5.7
    CVE-2023-6349

    Heap overflow in libvpx

    A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above

    Chromium libvpx libvpx libvpx Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-6349.html