ALAS2-2024-2485 — Important: less security update (Amazon Linux 2)

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-48624: close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.

Fixed packages 2

Release	Package	Fixed in
Amazon Linux · 2	less	0:458-9.amzn2.0.3
Amazon Linux · 2	less-debuginfo	0:458-9.amzn2.0.3

Vulnerabilities 1

High 7.8

CVE-2022-48624

close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.

less less less Debian Ubuntu Azure Linux

Feb 19, 2024

References

web
https://alas.aws.amazon.com/cve/html/CVE-2022-48624.html