Amazon Linux 2023 Security Advisory: ALAS-2024-535
Advisory Release Date: 2024-02-15 02:52 Pacific
Advisory Updated Date: 2024-02-19 20:26 Pacific
Severity:
Medium
Issue Overview:
Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data. (CVE-2021-38165)
Affected Packages:
lynx
Issue Correction:
Run dnf update lynx --releasever 2023.3.20240219 to update your system.
New Packages:
aarch64:
lynx-debuginfo-2.8.9-13.amzn2023.0.3.aarch64
lynx-2.8.9-13.amzn2023.0.3.aarch64
lynx-debugsource-2.8.9-13.amzn2023.0.3.aarch64
src:
lynx-2.8.9-13.amzn2023.0.3.src
x86_64:
lynx-debuginfo-2.8.9-13.amzn2023.0.3.x86_64
lynx-2.8.9-13.amzn2023.0.3.x86_64
lynx-debugsource-2.8.9-13.amzn2023.0.3.x86_64