ALAS2-2023-2294

Related Vulnerabilities: CVE-2023-44488  

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. (CVE-2023-44488)

ALAS2-2023-2294


Amazon Linux 2 Security Advisory: ALAS-2023-2294
Advisory Release Date: 2023-10-12 15:09 Pacific
Advisory Updated Date: 2023-10-19 23:40 Pacific
Severity: Medium

Issue Overview:

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. (CVE-2023-44488)


Affected Packages:

thunderbird


Issue Correction:
Run yum update thunderbird to update your system.

New Packages:
aarch64:
    thunderbird-102.15.1-1.amzn2.0.2.aarch64
    thunderbird-debuginfo-102.15.1-1.amzn2.0.2.aarch64

src:
    thunderbird-102.15.1-1.amzn2.0.2.src

x86_64:
    thunderbird-102.15.1-1.amzn2.0.2.x86_64
    thunderbird-debuginfo-102.15.1-1.amzn2.0.2.x86_64