Amazon Linux 2023 Security Advisory: ALAS-2024-465
Advisory Release Date: 2024-01-03 23:20 Pacific
Advisory Updated Date: 2024-01-08 21:03 Pacific
Severity:
Medium
Issue Overview:
The upstream bug report describes this issue as follows:
A flaw was found in Ansible, where a user's controller is vulnerable to template injection when internal templating operations may errantly remove the unsafe designation from template data. (CVE-2023-5764)
Affected Packages:
ansible-core
Issue Correction:
Run dnf update ansible-core --releasever 2023.3.20240108 to update your system.
New Packages:
aarch64:
ansible-test-2.15.3-1.amzn2023.0.2.aarch64
ansible-core-2.15.3-1.amzn2023.0.2.aarch64
src:
ansible-core-2.15.3-1.amzn2023.0.2.src
x86_64:
ansible-test-2.15.3-1.amzn2023.0.2.x86_64
ansible-core-2.15.3-1.amzn2023.0.2.x86_64