ALAS-2024-620


Amazon Linux 2023 Security Advisory: ALAS-2024-620
Advisory Release Date: 2024-05-09 17:16 Pacific
Advisory Updated Date: 2024-05-15 19:35 Pacific
Severity: Important

Issue Overview:

http2/hpack: avoid quadratic complexity in hpack decoding (CVE-2022-41723)


Affected Packages:

ecs-init


Issue Correction:
Run dnf update ecs-init --releasever 2023.4.20240513 to update your system.

New Packages:
aarch64:
    ecs-init-1.70.1-1.amzn2023.aarch64

src:
    ecs-init-1.70.1-1.amzn2023.src

x86_64:
    ecs-init-1.70.1-1.amzn2023.x86_64