Amazon Linux 1 Security Advisory: ALAS-2023-1752
Advisory Release Date: 2023-05-25 17:41 Pacific
Advisory Updated Date: 2023-06-06 18:36 Pacific
Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser. (CVE-2022-47629)
Affected Packages:
libksba
Issue Correction:
Run yum update libksba to update your system.
i686:
libksba-devel-1.3.5-1.11.amzn1.i686
libksba-1.3.5-1.11.amzn1.i686
libksba-debuginfo-1.3.5-1.11.amzn1.i686
src:
libksba-1.3.5-1.11.amzn1.src
x86_64:
libksba-debuginfo-1.3.5-1.11.amzn1.x86_64
libksba-devel-1.3.5-1.11.amzn1.x86_64
libksba-1.3.5-1.11.amzn1.x86_64