Amazon Linux 2 Security Advisory: ALAS-2023-2041
Advisory Release Date: 2023-05-11 17:49 Pacific
Advisory Updated Date: 2023-05-16 15:15 Pacific
Severity:
Important
Issue Overview:
Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser. (CVE-2022-47629)
Affected Packages:
libksba
Note:
This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update libksba to update your system.
New Packages:
aarch64:
libksba-1.3.0-6.amzn2.0.1.aarch64
libksba-devel-1.3.0-6.amzn2.0.1.aarch64
libksba-debuginfo-1.3.0-6.amzn2.0.1.aarch64
i686:
libksba-1.3.0-6.amzn2.0.1.i686
libksba-devel-1.3.0-6.amzn2.0.1.i686
libksba-debuginfo-1.3.0-6.amzn2.0.1.i686
src:
libksba-1.3.0-6.amzn2.0.1.src
x86_64:
libksba-1.3.0-6.amzn2.0.1.x86_64
libksba-devel-1.3.0-6.amzn2.0.1.x86_64
libksba-debuginfo-1.3.0-6.amzn2.0.1.x86_64