Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-33065: Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | libsndfile | 0:1.2.2-3.amzn2023.0.2 |
| Amazon Linux · 2023 | libsndfile-debuginfo | 0:1.2.2-3.amzn2023.0.2 |
| Amazon Linux · 2023 | libsndfile-debugsource | 0:1.2.2-3.amzn2023.0.2 |
| Amazon Linux · 2023 | libsndfile-devel | 0:1.2.2-3.amzn2023.0.2 |
| Amazon Linux · 2023 | libsndfile-utils | 0:1.2.2-3.amzn2023.0.2 |
| Amazon Linux · 2023 | libsndfile-utils-debuginfo | 0:1.2.2-3.amzn2023.0.2 |
Vulnerabilities 1
-
Unscored —
Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_heade…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-33065.html