ALAS2023-2023-451 — Moderate: jbig2dec security update (Amazon Linux 2023)

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-46361: Artifex Software jbig2dec v0.20 was discovered to contain a SEGV vulnerability via jbig2_error at /jbig2dec/jbig2.c.

Fixed packages 6

Release	Package	Fixed in
Amazon Linux · 2023	jbig2dec	0:0.19-4.amzn2023.0.2
Amazon Linux · 2023	jbig2dec-debuginfo	0:0.19-4.amzn2023.0.2
Amazon Linux · 2023	jbig2dec-debugsource	0:0.19-4.amzn2023.0.2
Amazon Linux · 2023	jbig2dec-devel	0:0.19-4.amzn2023.0.2
Amazon Linux · 2023	jbig2dec-libs	0:0.19-4.amzn2023.0.2
Amazon Linux · 2023	jbig2dec-libs-debuginfo	0:0.19-4.amzn2023.0.2

Vulnerabilities 1

Unscored —

CVE-2023-46361

Artifex Software jbig2dec v0.20 was discovered to contain a SEGV vulnerability via jbig2_error at /jbig2dec/jbig2.c.

jbig2dec jbig2dec Debian Ubuntu

Oct 31, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-46361.html