Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-24626: socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | screen | 0:4.1.0-0.27.20120314git3c2946.amzn2.0.1 |
| Amazon Linux · 2 | screen-debuginfo | 0:4.1.0-0.27.20120314git3c2946.amzn2.0.1 |
Vulnerabilities 1
-
Medium 6.5CVE-2023-24626 Public exploit
socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-24626.html