Amazon Linux 2023 Security Advisory: ALAS-2023-328
Advisory Release Date: 2023-08-31 21:45 Pacific
Advisory Updated Date: 2023-09-07 21:18 Pacific
Severity:
Medium
Issue Overview:
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. (CVE-2023-30630)
Affected Packages:
dmidecode
Issue Correction:
Run dnf update dmidecode --releasever 2023.1.20230906 to update your system.
New Packages:
aarch64:
dmidecode-debuginfo-3.5-1.amzn2023.0.2.aarch64
dmidecode-debugsource-3.5-1.amzn2023.0.2.aarch64
dmidecode-3.5-1.amzn2023.0.2.aarch64
src:
dmidecode-3.5-1.amzn2023.0.2.src
x86_64:
dmidecode-debuginfo-3.5-1.amzn2023.0.2.x86_64
dmidecode-debugsource-3.5-1.amzn2023.0.2.x86_64
dmidecode-3.5-1.amzn2023.0.2.x86_64