Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-40633: A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service via a gif format file.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | giflib | 0:4.1.6-9.amzn2.0.4 |
| Amazon Linux · 2 | giflib-debuginfo | 0:4.1.6-9.amzn2.0.4 |
| Amazon Linux · 2 | giflib-devel | 0:4.1.6-9.amzn2.0.4 |
| Amazon Linux · 2 | giflib-utils | 0:4.1.6-9.amzn2.0.4 |
Vulnerabilities 1
-
Unscored —
A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of me…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-40633.html