Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-50967: latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | jose | 0:10-1.amzn2.0.1 |
| Amazon Linux · 2 | jose-debuginfo | 0:10-1.amzn2.0.1 |
| Amazon Linux · 2 | libjose | 0:10-1.amzn2.0.1 |
| Amazon Linux · 2 | libjose-devel | 0:10-1.amzn2.0.1 |
Vulnerabilities 1
-
High 7.5
latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka P…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-50967.html