High ALAS2023-2023-133 1 CVE

Important: sudo security update (Amazon Linux 2023)

Published Mar 11, 2023 · Updated Mar 14, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-27320: Sudo before 1.9.13p2 has a double free in the per-command chroot feature.

Fixed packages 8

Release	Package	Fixed in
Amazon Linux · 2023	sudo	0:1.9.12-1.p2.amzn2023.0.3
Amazon Linux · 2023	sudo-debuginfo	0:1.9.12-1.p2.amzn2023.0.3
Amazon Linux · 2023	sudo-debugsource	0:1.9.12-1.p2.amzn2023.0.3
Amazon Linux · 2023	sudo-devel	0:1.9.12-1.p2.amzn2023.0.3
Amazon Linux · 2023	sudo-logsrvd	0:1.9.12-1.p2.amzn2023.0.3
Amazon Linux · 2023	sudo-logsrvd-debuginfo	0:1.9.12-1.p2.amzn2023.0.3
Amazon Linux · 2023	sudo-python-plugin	0:1.9.12-1.p2.amzn2023.0.3
Amazon Linux · 2023	sudo-python-plugin-debuginfo	0:1.9.12-1.p2.amzn2023.0.3

Vulnerabilities 1

High 7.2

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature.

sudo sudo sudo sudo Debian Ubuntu Azure Linux Alpine

Feb 28, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-27320.html