ALAS2023-2024-504


Amazon Linux 2023 Security Advisory: ALAS2023-2024-504
Advisory Released Date: 2024-02-06
Advisory Updated Date: 2024-02-06
Severity: Low

Issue Overview:

A flaw was found in Indent. This issue may allow a local user to use a specially-crafted file to trigger a heap-based buffer overflow, which can lead to an application crash. (CVE-2024-0911)


Affected Packages:

indent


Issue Correction:
Run dnf update indent --releasever 2023.3.20240205 to update your system.

New Packages:
aarch64:
    indent-debuginfo-2.2.12-7.amzn2023.0.6.aarch64
    indent-debugsource-2.2.12-7.amzn2023.0.6.aarch64
    indent-2.2.12-7.amzn2023.0.6.aarch64

src:
    indent-2.2.12-7.amzn2023.0.6.src

x86_64:
    indent-debuginfo-2.2.12-7.amzn2023.0.6.x86_64
    indent-debugsource-2.2.12-7.amzn2023.0.6.x86_64
    indent-2.2.12-7.amzn2023.0.6.x86_64