Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-24626: socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | screen | 0:4.8.0-5.amzn2023.0.3 |
| Amazon Linux · 2023 | screen-debuginfo | 0:4.8.0-5.amzn2023.0.3 |
| Amazon Linux · 2023 | screen-debugsource | 0:4.8.0-5.amzn2023.0.3 |
Vulnerabilities 1
-
Medium 6.5CVE-2023-24626 Public exploit
socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-24626.html