Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-39976: log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | doxygen2man | 0:2.0.6-1.amzn2023.0.1 |
| Amazon Linux · 2023 | doxygen2man-debuginfo | 0:2.0.6-1.amzn2023.0.1 |
| Amazon Linux · 2023 | libqb | 0:2.0.6-1.amzn2023.0.1 |
| Amazon Linux · 2023 | libqb-debuginfo | 0:2.0.6-1.amzn2023.0.1 |
| Amazon Linux · 2023 | libqb-debugsource | 0:2.0.6-1.amzn2023.0.1 |
| Amazon Linux · 2023 | libqb-devel | 0:2.0.6-1.amzn2023.0.1 |
Vulnerabilities 1
-
Unscored —
log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not cons…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-39976.html