ALAS2022-2022-186

Related Vulnerabilities: CVE-2022-1215  

A format string vulnerability was found in libinput (CVE-2022-1215)

ALAS2022-2022-186


Amazon Linux 2022 Security Advisory: ALAS-2022-186
Advisory Release Date: 2022-11-01 21:24 Pacific
Advisory Updated Date: 2022-11-03 20:59 Pacific
Severity: Medium
References: CVE-2022-1215 

Issue Overview:

A format string vulnerability was found in libinput (CVE-2022-1215)


Affected Packages:

libinput


Issue Correction:
Run dnf update libinput --releasever=2022.0.20221102 to update your system.

New Packages:
aarch64:
    libinput-test-debuginfo-1.19.4-1.amzn2022.0.1.aarch64
    libinput-devel-1.19.4-1.amzn2022.0.1.aarch64
    libinput-utils-debuginfo-1.19.4-1.amzn2022.0.1.aarch64
    libinput-debugsource-1.19.4-1.amzn2022.0.1.aarch64
    libinput-debuginfo-1.19.4-1.amzn2022.0.1.aarch64
    libinput-utils-1.19.4-1.amzn2022.0.1.aarch64
    libinput-1.19.4-1.amzn2022.0.1.aarch64
    libinput-test-1.19.4-1.amzn2022.0.1.aarch64

i686:
    libinput-test-debuginfo-1.19.4-1.amzn2022.0.1.i686
    libinput-debuginfo-1.19.4-1.amzn2022.0.1.i686
    libinput-test-1.19.4-1.amzn2022.0.1.i686
    libinput-debugsource-1.19.4-1.amzn2022.0.1.i686
    libinput-1.19.4-1.amzn2022.0.1.i686
    libinput-utils-debuginfo-1.19.4-1.amzn2022.0.1.i686
    libinput-utils-1.19.4-1.amzn2022.0.1.i686
    libinput-devel-1.19.4-1.amzn2022.0.1.i686

src:
    libinput-1.19.4-1.amzn2022.0.1.src

x86_64:
    libinput-devel-1.19.4-1.amzn2022.0.1.x86_64
    libinput-debugsource-1.19.4-1.amzn2022.0.1.x86_64
    libinput-debuginfo-1.19.4-1.amzn2022.0.1.x86_64
    libinput-utils-debuginfo-1.19.4-1.amzn2022.0.1.x86_64
    libinput-utils-1.19.4-1.amzn2022.0.1.x86_64
    libinput-test-debuginfo-1.19.4-1.amzn2022.0.1.x86_64
    libinput-test-1.19.4-1.amzn2022.0.1.x86_64
    libinput-1.19.4-1.amzn2022.0.1.x86_64