Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-3624: There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in the victim's system.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | LibRaw | 0:0.19.4-1.amzn2.0.6 |
| Amazon Linux · 2 | LibRaw-debuginfo | 0:0.19.4-1.amzn2.0.6 |
| Amazon Linux · 2 | LibRaw-devel | 0:0.19.4-1.amzn2.0.6 |
| Amazon Linux · 2 | LibRaw-static | 0:0.19.4-1.amzn2.0.6 |
Vulnerabilities 1
-
Unscored —
There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input im…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-3624.html