Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-25710: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | apache-commons-compress | 0:1.21-4.amzn2023.0.4 |
| Amazon Linux · 2023 | apache-commons-compress-javadoc | 0:1.21-4.amzn2023.0.4 |
Vulnerabilities 1
-
High 8.1
Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-25710.html