ALAS-2024-504


Amazon Linux 2023 Security Advisory: ALAS-2024-504
Advisory Release Date: 2024-02-01 17:56 Pacific
Advisory Updated Date: 2024-02-06 15:00 Pacific
Severity: Low

Issue Overview:

A flaw was found in Indent. This issue may allow a local user to use a specially-crafted file to trigger a heap-based buffer overflow, which can lead to an application crash. (CVE-2024-0911)


Affected Packages:

indent


Issue Correction:
Run dnf update indent --releasever 2023.3.20240205 to update your system.

New Packages:
aarch64:
    indent-debuginfo-2.2.12-7.amzn2023.0.6.aarch64
    indent-debugsource-2.2.12-7.amzn2023.0.6.aarch64
    indent-2.2.12-7.amzn2023.0.6.aarch64

src:
    indent-2.2.12-7.amzn2023.0.6.src

x86_64:
    indent-debuginfo-2.2.12-7.amzn2023.0.6.x86_64
    indent-debugsource-2.2.12-7.amzn2023.0.6.x86_64
    indent-2.2.12-7.amzn2023.0.6.x86_64