Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-30630: Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | dmidecode | 1:3.5-1.amzn2023.0.2 |
| Amazon Linux · 2023 | dmidecode-debuginfo | 1:3.5-1.amzn2023.0.2 |
| Amazon Linux · 2023 | dmidecode-debugsource | 1:3.5-1.amzn2023.0.2 |
Vulnerabilities 1
-
High 7.1
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, exec…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-30630.html