Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-31047: An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service (DoS) via the convert function of exrmultipart.cpp.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | openexr | 0:3.1.5-1.amzn2023.0.5 |
| Amazon Linux · 2023 | openexr-debuginfo | 0:3.1.5-1.amzn2023.0.5 |
| Amazon Linux · 2023 | openexr-debugsource | 0:3.1.5-1.amzn2023.0.5 |
| Amazon Linux · 2023 | openexr-devel | 0:3.1.5-1.amzn2023.0.5 |
| Amazon Linux · 2023 | openexr-libs | 0:3.1.5-1.amzn2023.0.5 |
| Amazon Linux · 2023 | openexr-libs-debuginfo | 0:3.1.5-1.amzn2023.0.5 |
Vulnerabilities 1
-
Low 3.3
An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-31047.html