ALAS2-2023-2041 — Important: libksba security update (Amazon Linux 2)

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-47629: Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.

Fixed packages 3

Release	Package	Fixed in
Amazon Linux · 2	libksba	0:1.3.0-6.amzn2.0.1
Amazon Linux · 2	libksba-debuginfo	0:1.3.0-6.amzn2.0.1
Amazon Linux · 2	libksba-devel	0:1.3.0-6.amzn2.0.1

Vulnerabilities 1

Critical 9.8

CVE-2022-47629

Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.

libksba libksba libksba libksba Debian Ubuntu Azure Linux Alpine

Dec 20, 2022

References

web
https://alas.aws.amazon.com/cve/html/CVE-2022-47629.html