Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-2953: A vulnerability was found in openldap that can cause a null pointer dereference in the ber_memalloc_x() function.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | openldap | 0:2.4.44-25.amzn2.0.6 |
| Amazon Linux · 2 | openldap-clients | 0:2.4.44-25.amzn2.0.6 |
| Amazon Linux · 2 | openldap-debuginfo | 0:2.4.44-25.amzn2.0.6 |
| Amazon Linux · 2 | openldap-devel | 0:2.4.44-25.amzn2.0.6 |
| Amazon Linux · 2 | openldap-servers | 0:2.4.44-25.amzn2.0.6 |
| Amazon Linux · 2 | openldap-servers-sql | 0:2.4.44-25.amzn2.0.6 |
Vulnerabilities 1
-
High 7.5
A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() functio…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-2953.html