Skip to content
OpenAdvisories
Low ALAS2023-2023-144 1 CVE

Low: autotrace security update (Amazon Linux 2023)

Published Mar 20, 2023 · Updated Mar 22, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-32323: AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660.

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2023 autotrace 0:0.31.9-86.amzn2023.0.1
Amazon Linux · 2023 autotrace-debuginfo 0:0.31.9-86.amzn2023.0.1
Amazon Linux · 2023 autotrace-debugsource 0:0.31.9-86.amzn2023.0.1
Amazon Linux · 2023 autotrace-devel 0:0.31.9-86.amzn2023.0.1

Vulnerabilities 1

  • Unscored —
    CVE-2022-32323

    AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660.

    autotrace Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-32323.html