Amazon Linux 2023 Security Advisory: ALAS-2023-292
Advisory Release Date: 2023-08-17 11:19 Pacific
Advisory Updated Date: 2023-08-23 22:29 Pacific
Severity:
Low
Issue Overview:
A heap out-of-bounds read flaw was found in builtin.c in the gawk package which may result in a crash of the software. (CVE-2023-4156)
Affected Packages:
gawk
Issue Correction:
Run dnf update gawk --releasever 2023.1.20230823 to update your system.
New Packages:
aarch64:
gawk-devel-5.1.0-3.amzn2023.0.3.aarch64
gawk-all-langpacks-5.1.0-3.amzn2023.0.3.aarch64
gawk-debugsource-5.1.0-3.amzn2023.0.3.aarch64
gawk-debuginfo-5.1.0-3.amzn2023.0.3.aarch64
gawk-5.1.0-3.amzn2023.0.3.aarch64
noarch:
gawk-doc-5.1.0-3.amzn2023.0.3.noarch
src:
gawk-5.1.0-3.amzn2023.0.3.src
x86_64:
gawk-devel-5.1.0-3.amzn2023.0.3.x86_64
gawk-all-langpacks-5.1.0-3.amzn2023.0.3.x86_64
gawk-debugsource-5.1.0-3.amzn2023.0.3.x86_64
gawk-5.1.0-3.amzn2023.0.3.x86_64
gawk-debuginfo-5.1.0-3.amzn2023.0.3.x86_64