Skip to content
OpenAdvisories
Low ALAS2023-2023-333 1 CVE

Low: file security update (Amazon Linux 2023)

Published Aug 31, 2023 · Updated Sep 7, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-48554: File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.

Fixed packages 8

ReleasePackageFixed in
Amazon Linux · 2023 file 0:5.39-7.amzn2023.0.4
Amazon Linux · 2023 file-debuginfo 0:5.39-7.amzn2023.0.4
Amazon Linux · 2023 file-debugsource 0:5.39-7.amzn2023.0.4
Amazon Linux · 2023 file-devel 0:5.39-7.amzn2023.0.4
Amazon Linux · 2023 file-libs 0:5.39-7.amzn2023.0.4
Amazon Linux · 2023 file-libs-debuginfo 0:5.39-7.amzn2023.0.4
Amazon Linux · 2023 file-static 0:5.39-7.amzn2023.0.4
Amazon Linux · 2023 python3-file-magic 0:5.39-7.amzn2023.0.4

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-48554.html