Skip to content
OpenAdvisories
Low ALAS2023-2023-013 1 CVE

Low: libsolv security update (Amazon Linux 2023)

Published Feb 17, 2023 · Updated Feb 22, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-3200: A flaw was found in libsolv. A buffer overflow vulnerability could cause a denial of service. The highest threat from this vulnerability is to system availability.

Fixed packages 14

ReleasePackageFixed in
Amazon Linux · 2023 libsolv 0:0.7.22-1.amzn2023.0.2
Amazon Linux · 2023 libsolv-debuginfo 0:0.7.22-1.amzn2023.0.2
Amazon Linux · 2023 libsolv-debugsource 0:0.7.22-1.amzn2023.0.2
Amazon Linux · 2023 libsolv-demo 0:0.7.22-1.amzn2023.0.2
Amazon Linux · 2023 libsolv-demo-debuginfo 0:0.7.22-1.amzn2023.0.2
Amazon Linux · 2023 libsolv-devel 0:0.7.22-1.amzn2023.0.2
Amazon Linux · 2023 libsolv-tools 0:0.7.22-1.amzn2023.0.2
Amazon Linux · 2023 libsolv-tools-debuginfo 0:0.7.22-1.amzn2023.0.2
Amazon Linux · 2023 perl-solv 0:0.7.22-1.amzn2023.0.2
Amazon Linux · 2023 perl-solv-debuginfo 0:0.7.22-1.amzn2023.0.2
Amazon Linux · 2023 python3-solv 0:0.7.22-1.amzn2023.0.2
Amazon Linux · 2023 python3-solv-debuginfo 0:0.7.22-1.amzn2023.0.2
Amazon Linux · 2023 ruby-solv 0:0.7.22-1.amzn2023.0.2
Amazon Linux · 2023 ruby-solv-debuginfo 0:0.7.22-1.amzn2023.0.2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-3200.html