Boletines de Vulnerabilidades

Issue with DeepJavaLibrary - CVE-2024-37902

   
Software afectado AmazonWS
 
Publication Date: 2024/06/17 10:30 AM PDT AWS is aware of CVE-2024-37902, relating to a potential issue with the archive extraction utilities for DeepJavaLibrary (DJL). On May 15, 2024, we released version 0.28.0 to address this issue. If you are using an affected version (0.1.0 through 0.27.0), we recommend you upgrade to 0.28.0 or higher. For additional information, please refer to the DJL release notes. Security-related questions or concerns can be brought to our attention via

More info:

https://aws.amazon.com/security/security-bulletins/AWS-2024-007/