Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-41409: Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | pcre2 | 0:10.40-1.amzn2023.0.3 |
| Amazon Linux · 2023 | pcre2-debuginfo | 0:10.40-1.amzn2023.0.3 |
| Amazon Linux · 2023 | pcre2-debugsource | 0:10.40-1.amzn2023.0.3 |
| Amazon Linux · 2023 | pcre2-devel | 0:10.40-1.amzn2023.0.3 |
| Amazon Linux · 2023 | pcre2-static | 0:10.40-1.amzn2023.0.3 |
| Amazon Linux · 2023 | pcre2-syntax | 0:10.40-1.amzn2023.0.3 |
| Amazon Linux · 2023 | pcre2-tools | 0:10.40-1.amzn2023.0.3 |
| Amazon Linux · 2023 | pcre2-tools-debuginfo | 0:10.40-1.amzn2023.0.3 |
| Amazon Linux · 2023 | pcre2-utf16 | 0:10.40-1.amzn2023.0.3 |
| Amazon Linux · 2023 | pcre2-utf16-debuginfo | 0:10.40-1.amzn2023.0.3 |
| Amazon Linux · 2023 | pcre2-utf32 | 0:10.40-1.amzn2023.0.3 |
| Amazon Linux · 2023 | pcre2-utf32-debuginfo | 0:10.40-1.amzn2023.0.3 |
Vulnerabilities 1
-
Unscored —
Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspeci…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-41409.html