ALAS2-2023-2028: CVEs fixed (Amazon Linux)

ALAS2-2023-2028 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2023-29536 HIGH 8.8 UPGRADE UPGRADE An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled me
• CVE-2023-29539 HIGH 8.8 UPGRADE UPGRADE When handling the filename directive in the Content-Disposition header, the filename would be truncated if the

Applies to

• Amazon Linux 2

← Back to latest CVEs