Amazon Linux 2023 Security Advisory: ALAS-2023-210
Advisory Release Date: 2023-06-07 23:52 Pacific
Advisory Updated Date: 2023-06-12 23:40 Pacific
Severity:
Medium
Issue Overview:
An untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21.3 that could allow an attacker to search and potentially load ICU data when running with elevated privileges. (CVE-2023-23920)
Affected Packages:
nodejs
Issue Correction:
Run dnf update nodejs --releasever 2023.0.20230614 to update your system.
New Packages:
aarch64:
nodejs-libs-debuginfo-18.12.1-1.amzn2023.0.4.aarch64
nodejs-full-i18n-18.12.1-1.amzn2023.0.4.aarch64
nodejs-debuginfo-18.12.1-1.amzn2023.0.4.aarch64
nodejs-devel-18.12.1-1.amzn2023.0.4.aarch64
v8-devel-10.2.154.15-1.18.12.1.1.amzn2023.0.4.aarch64
nodejs-libs-18.12.1-1.amzn2023.0.4.aarch64
nodejs-18.12.1-1.amzn2023.0.4.aarch64
npm-8.19.2-1.18.12.1.1.amzn2023.0.4.aarch64
nodejs-debugsource-18.12.1-1.amzn2023.0.4.aarch64
noarch:
nodejs-docs-18.12.1-1.amzn2023.0.4.noarch
src:
nodejs-18.12.1-1.amzn2023.0.4.src
x86_64:
nodejs-libs-debuginfo-18.12.1-1.amzn2023.0.4.x86_64
nodejs-devel-18.12.1-1.amzn2023.0.4.x86_64
nodejs-18.12.1-1.amzn2023.0.4.x86_64
nodejs-libs-18.12.1-1.amzn2023.0.4.x86_64
v8-devel-10.2.154.15-1.18.12.1.1.amzn2023.0.4.x86_64
nodejs-debuginfo-18.12.1-1.amzn2023.0.4.x86_64
nodejs-full-i18n-18.12.1-1.amzn2023.0.4.x86_64
nodejs-debugsource-18.12.1-1.amzn2023.0.4.x86_64
npm-8.19.2-1.18.12.1.1.amzn2023.0.4.x86_64