Skip to content
OpenAdvisories
Medium ALAS2023-2025-861 1 CVE

Moderate: libglvnd security update (Amazon Linux 2023)

Published Feb 12, 2025 · Updated Feb 21, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-45924: libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.

Fixed packages 13

ReleasePackageFixed in
Amazon Linux · 2023 libglvnd 1:1.7.0-4.amzn2023.0.2
Amazon Linux · 2023 libglvnd-core-devel 1:1.7.0-4.amzn2023.0.2
Amazon Linux · 2023 libglvnd-debuginfo 1:1.7.0-4.amzn2023.0.2
Amazon Linux · 2023 libglvnd-debugsource 1:1.7.0-4.amzn2023.0.2
Amazon Linux · 2023 libglvnd-devel 1:1.7.0-4.amzn2023.0.2
Amazon Linux · 2023 libglvnd-egl 1:1.7.0-4.amzn2023.0.2
Amazon Linux · 2023 libglvnd-egl-debuginfo 1:1.7.0-4.amzn2023.0.2
Amazon Linux · 2023 libglvnd-gles 1:1.7.0-4.amzn2023.0.2
Amazon Linux · 2023 libglvnd-gles-debuginfo 1:1.7.0-4.amzn2023.0.2
Amazon Linux · 2023 libglvnd-glx 1:1.7.0-4.amzn2023.0.2
Amazon Linux · 2023 libglvnd-glx-debuginfo 1:1.7.0-4.amzn2023.0.2
Amazon Linux · 2023 libglvnd-opengl 1:1.7.0-4.amzn2023.0.2
Amazon Linux · 2023 libglvnd-opengl-debuginfo 1:1.7.0-4.amzn2023.0.2

Vulnerabilities 1

  • Critical 9.8
    CVE-2023-45924

    libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDra…

    libglvnd Debian

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-45924.html