Amazon Linux 2023 Security Advisory: ALAS-2023-224
Advisory Release Date: 2023-06-21 19:10 Pacific
Advisory Updated Date: 2023-06-27 20:58 Pacific
Severity:
Low
Issue Overview:
socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process. (CVE-2023-24626)
Affected Packages:
screen
Issue Correction:
Run dnf update screen --releasever 2023.1.20230628 to update your system.
New Packages:
aarch64:
screen-debuginfo-4.8.0-5.amzn2023.0.3.aarch64
screen-4.8.0-5.amzn2023.0.3.aarch64
screen-debugsource-4.8.0-5.amzn2023.0.3.aarch64
src:
screen-4.8.0-5.amzn2023.0.3.src
x86_64:
screen-debuginfo-4.8.0-5.amzn2023.0.3.x86_64
screen-debugsource-4.8.0-5.amzn2023.0.3.x86_64
screen-4.8.0-5.amzn2023.0.3.x86_64