Amazon Linux 2023 Security Advisory: ALAS-2023-201
Advisory Release Date: 2023-06-05 16:39 Pacific
Advisory Updated Date: 2023-06-07 20:09 Pacific
Severity:
Important
Issue Overview:
GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der. (CVE-2021-46848)
Affected Packages:
libtasn1
Issue Correction:
Run dnf update libtasn1 --releasever 2023.0.20230607 to update your system.
New Packages:
aarch64:
libtasn1-debugsource-4.19.0-1.amzn2023.0.1.aarch64
libtasn1-4.19.0-1.amzn2023.0.1.aarch64
libtasn1-tools-4.19.0-1.amzn2023.0.1.aarch64
libtasn1-devel-4.19.0-1.amzn2023.0.1.aarch64
libtasn1-debuginfo-4.19.0-1.amzn2023.0.1.aarch64
libtasn1-tools-debuginfo-4.19.0-1.amzn2023.0.1.aarch64
src:
libtasn1-4.19.0-1.amzn2023.0.1.src
x86_64:
libtasn1-debuginfo-4.19.0-1.amzn2023.0.1.x86_64
libtasn1-debugsource-4.19.0-1.amzn2023.0.1.x86_64
libtasn1-4.19.0-1.amzn2023.0.1.x86_64
libtasn1-tools-4.19.0-1.amzn2023.0.1.x86_64
libtasn1-tools-debuginfo-4.19.0-1.amzn2023.0.1.x86_64
libtasn1-devel-4.19.0-1.amzn2023.0.1.x86_64