ALAS2023-2023-438 — Moderate: re2c security update (Amazon Linux 2023)

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-23901: A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/dead_rules.cc.

Fixed packages 3

Release	Package	Fixed in
Amazon Linux · 2023	re2c	0:3.1-1.amzn2023.0.1
Amazon Linux · 2023	re2c-debuginfo	0:3.1-1.amzn2023.0.1
Amazon Linux · 2023	re2c-debugsource	0:3.1-1.amzn2023.0.1

Vulnerabilities 1

Unscored —

CVE-2022-23901

A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/dead_rules.cc.

re2c re2c re2c Debian Ubuntu Azure Linux

Mar 29, 2022

References

web
https://alas.aws.amazon.com/cve/html/CVE-2022-23901.html