Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-48624: close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. CVE-2022-46663: In GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | less | 0:608-2.amzn2023.0.1 |
| Amazon Linux · 2023 | less-debuginfo | 0:608-2.amzn2023.0.1 |
| Amazon Linux · 2023 | less-debugsource | 0:608-2.amzn2023.0.1 |
Vulnerabilities 2
-
High 7.8
close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.
-
High 7.5
In GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal.