Amazon Linux 2023 Security Advisory: ALAS-2023-229
Advisory Release Date: 2023-06-21 19:11 Pacific
Advisory Updated Date: 2023-06-27 20:58 Pacific
Severity:
Medium
Issue Overview:
Potential heap based buffer overflow found in _bfd_elf_slurp_version_tables() in bfd/elf.c. (CVE-2023-1972)
Affected Packages:
binutils
Issue Correction:
Run dnf update binutils --releasever 2023.1.20230628 to update your system.
New Packages:
aarch64:
binutils-devel-2.39-6.amzn2023.0.6.aarch64
binutils-gprofng-2.39-6.amzn2023.0.6.aarch64
binutils-gprofng-debuginfo-2.39-6.amzn2023.0.6.aarch64
binutils-debuginfo-2.39-6.amzn2023.0.6.aarch64
binutils-2.39-6.amzn2023.0.6.aarch64
binutils-debugsource-2.39-6.amzn2023.0.6.aarch64
src:
binutils-2.39-6.amzn2023.0.6.src
x86_64:
binutils-devel-2.39-6.amzn2023.0.6.x86_64
binutils-gprofng-debuginfo-2.39-6.amzn2023.0.6.x86_64
binutils-debuginfo-2.39-6.amzn2023.0.6.x86_64
binutils-gprofng-2.39-6.amzn2023.0.6.x86_64
binutils-2.39-6.amzn2023.0.6.x86_64
binutils-debugsource-2.39-6.amzn2023.0.6.x86_64