ALAS2023-2024-476


Amazon Linux 2023 Security Advisory: ALAS2023-2024-476
Advisory Released Date: 2024-01-08
Advisory Updated Date: 2024-01-08
Severity: Medium

Issue Overview:

Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack. (CVE-2023-3978)


Affected Packages:

ecs-init


Issue Correction:
Run dnf update ecs-init --releasever 2023.3.20240108 to update your system.

New Packages:
aarch64:
    ecs-init-1.79.1-1.amzn2023.aarch64

src:
    ecs-init-1.79.1-1.amzn2023.src

x86_64:
    ecs-init-1.79.1-1.amzn2023.x86_64