ALAS-2024-2447

Amazon Linux 2 Security Advisory: ALAS-2024-2447
Advisory Release Date: 2024-02-01 19:57 Pacific
Advisory Updated Date: 2024-02-29 10:03 Pacific
Severity: Low
Issue Overview:

2024-02-22: CVE-2023-42465 was removed from this advisory.

2024-02-22: The severity of this advisory has been changed from important to low.


Affected Packages:

sudo


Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.


Issue Correction:
Run yum update sudo to update your system.

New Packages:
aarch64:
    sudo-1.8.23-10.amzn2.3.6.aarch64
    sudo-devel-1.8.23-10.amzn2.3.6.aarch64
    sudo-debuginfo-1.8.23-10.amzn2.3.6.aarch64

i686:
    sudo-1.8.23-10.amzn2.3.6.i686
    sudo-devel-1.8.23-10.amzn2.3.6.i686
    sudo-debuginfo-1.8.23-10.amzn2.3.6.i686

src:
    sudo-1.8.23-10.amzn2.3.6.src

x86_64:
    sudo-1.8.23-10.amzn2.3.6.x86_64
    sudo-devel-1.8.23-10.amzn2.3.6.x86_64
    sudo-debuginfo-1.8.23-10.amzn2.3.6.x86_64

Additional References

Red Hat: 

Mitre: