ALASMATE-DESKTOP1.X-2024-005

Related Vulnerabilities: CVE-2021-46312  

An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero. (CVE-2021-46312)

ALASMATE-DESKTOP1.X-2024-005


Amazon Linux 2 Security Advisory: ALASMATE-DESKTOP1.X-2024-005
Advisory Release Date: 2024-01-03 23:00 Pacific
Advisory Updated Date: 2024-01-03 23:00 Pacific
Severity: Medium

Issue Overview:

An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero. (CVE-2021-46312)


Affected Packages:

djvulibre


Note:

This advisory is applicable to Amazon Linux 2 - Mate-desktop1.x Extra. Visit this page to learn more about Amazon Linux 2 (AL2) Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories.


Issue Correction:
"Run yum update djvulibre to update your system.
"

New Packages:
aarch64:
    djvulibre-3.5.27-30.amzn2.0.3.aarch64
    djvulibre-libs-3.5.27-30.amzn2.0.3.aarch64
    djvulibre-devel-3.5.27-30.amzn2.0.3.aarch64
    djvulibre-debuginfo-3.5.27-30.amzn2.0.3.aarch64

i686:
    djvulibre-3.5.27-30.amzn2.0.3.i686
    djvulibre-libs-3.5.27-30.amzn2.0.3.i686
    djvulibre-devel-3.5.27-30.amzn2.0.3.i686
    djvulibre-debuginfo-3.5.27-30.amzn2.0.3.i686

src:
    djvulibre-3.5.27-30.amzn2.0.3.src

x86_64:
    djvulibre-3.5.27-30.amzn2.0.3.x86_64
    djvulibre-libs-3.5.27-30.amzn2.0.3.x86_64
    djvulibre-devel-3.5.27-30.amzn2.0.3.x86_64
    djvulibre-debuginfo-3.5.27-30.amzn2.0.3.x86_64