Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-47069: p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | p7zip | 0:16.02-20.amzn2023.0.5 |
| Amazon Linux · 2023 | p7zip-debugsource | 0:16.02-20.amzn2023.0.5 |
| Amazon Linux · 2023 | p7zip-doc | 0:16.02-20.amzn2023.0.5 |
| Amazon Linux · 2023 | p7zip-plugins | 0:16.02-20.amzn2023.0.5 |
| Amazon Linux · 2023 | p7zip-plugins-debuginfo | 0:16.02-20.amzn2023.0.5 |
Vulnerabilities 1
-
Unscored —
p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive:…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-47069.html