Skip to content
OpenAdvisories
Critical ALAS2023-2023-112 2 CVEs

Critical: clamav security update (Amazon Linux 2023)

Published Feb 21, 2023 · Updated Feb 22, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-20052: A possible remote information leak vulnerability in the DMG file parser. The issue affects versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. CVE-2023-20032: Possible remote code execution vulnerability in the ClamAV HFS+ file parser. The issue affects ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.

Fixed packages 15

ReleasePackageFixed in
Amazon Linux · 2023 clamav 0:0.103.8-1.amzn2023.0.1
Amazon Linux · 2023 clamav-data 0:0.103.8-1.amzn2023.0.1
Amazon Linux · 2023 clamav-debuginfo 0:0.103.8-1.amzn2023.0.1
Amazon Linux · 2023 clamav-debugsource 0:0.103.8-1.amzn2023.0.1
Amazon Linux · 2023 clamav-devel 0:0.103.8-1.amzn2023.0.1
Amazon Linux · 2023 clamav-doc 0:0.103.8-1.amzn2023.0.1
Amazon Linux · 2023 clamav-filesystem 0:0.103.8-1.amzn2023.0.1
Amazon Linux · 2023 clamav-lib 0:0.103.8-1.amzn2023.0.1
Amazon Linux · 2023 clamav-lib-debuginfo 0:0.103.8-1.amzn2023.0.1
Amazon Linux · 2023 clamav-milter 0:0.103.8-1.amzn2023.0.1
Amazon Linux · 2023 clamav-milter-debuginfo 0:0.103.8-1.amzn2023.0.1
Amazon Linux · 2023 clamav-update 0:0.103.8-1.amzn2023.0.1
Amazon Linux · 2023 clamav-update-debuginfo 0:0.103.8-1.amzn2023.0.1
Amazon Linux · 2023 clamd 0:0.103.8-1.amzn2023.0.1
Amazon Linux · 2023 clamd-debuginfo 0:0.103.8-1.amzn2023.0.1

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-20032.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-20052.html