ALAS2-2025-3011 — Low: optipng security update (Amazon Linux 2)

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-43907: OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.

Fixed packages 2

Release	Package	Fixed in
Amazon Linux · 2	optipng	0:0.7.7-3.amzn2.0.1
Amazon Linux · 2	optipng-debuginfo	0:0.7.7-3.amzn2.0.1

Vulnerabilities 1

High 7.8

CVE-2023-43907

OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.

optipng optipng optipng optipng Debian Ubuntu Azure Linux Alpine

Oct 1, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-43907.html