Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-48161: Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | giflib | 0:4.1.6-9.amzn2.0.3 |
| Amazon Linux · 2 | giflib-debuginfo | 0:4.1.6-9.amzn2.0.3 |
| Amazon Linux · 2 | giflib-devel | 0:4.1.6-9.amzn2.0.3 |
| Amazon Linux · 2 | giflib-utils | 0:4.1.6-9.amzn2.0.3 |
Vulnerabilities 1
-
Unscored —
Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-48161.html