Medium ALAS2023-2025-821 1 CVE

Moderate: openjpeg2 security update (Amazon Linux 2023)

Published Jan 21, 2025 · Updated Jan 24, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-39328: openjpeg: denail of service via crafted image file

Fixed packages 7

Release	Package	Fixed in
Amazon Linux · 2023	openjpeg2	0:2.4.0-11.amzn2023.0.4
Amazon Linux · 2023	openjpeg2-debuginfo	0:2.4.0-11.amzn2023.0.4
Amazon Linux · 2023	openjpeg2-debugsource	0:2.4.0-11.amzn2023.0.4
Amazon Linux · 2023	openjpeg2-devel	0:2.4.0-11.amzn2023.0.4
Amazon Linux · 2023	openjpeg2-devel-docs	0:2.4.0-11.amzn2023.0.4
Amazon Linux · 2023	openjpeg2-tools	0:2.4.0-11.amzn2023.0.4
Amazon Linux · 2023	openjpeg2-tools-debuginfo	0:2.4.0-11.amzn2023.0.4

Vulnerabilities 1

Medium 5.5

CVE-2023-39328

Openjpeg: denail of service via crafted image file

A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Wolfi

Jul 9, 2024

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-39328.html