Skip to content
OpenAdvisories
Medium ALAS2-2025-2782 1 CVE

Moderate: libglvnd security update (Amazon Linux 2)

Published Feb 26, 2025 · Updated Mar 7, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-45924: libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.

Fixed packages 8

ReleasePackageFixed in
Amazon Linux · 2 libglvnd 1:1.0.1-1.amzn2.0.2
Amazon Linux · 2 libglvnd-core-devel 1:1.0.1-1.amzn2.0.2
Amazon Linux · 2 libglvnd-debuginfo 1:1.0.1-1.amzn2.0.2
Amazon Linux · 2 libglvnd-devel 1:1.0.1-1.amzn2.0.2
Amazon Linux · 2 libglvnd-egl 1:1.0.1-1.amzn2.0.2
Amazon Linux · 2 libglvnd-gles 1:1.0.1-1.amzn2.0.2
Amazon Linux · 2 libglvnd-glx 1:1.0.1-1.amzn2.0.2
Amazon Linux · 2 libglvnd-opengl 1:1.0.1-1.amzn2.0.2

Vulnerabilities 1

  • Critical 9.8
    CVE-2023-45924

    libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDra…

    libglvnd Debian

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-45924.html