Linux · Amazon Linux · Security advisory · September 27, 2023

ALAS2023-2023-359: Security update for 228 packages

ALAS2023-2023-359, released September 27, 2023, fixes 4 CVEs across 200 products. One of them is being exploited (CVE-2023-4911); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
4
None rated Critical
Exploited
1
CVE-2023-4911
Highest CVSS
7.8
Base score, 0 to 10
Highest EPSS
0.6377
99th percentile

Priority of the 4 CVEs

Patch now 1 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
compat-libpthread-nonsharedamzn 20232.34-52.amzn2023.0.6
glibcamzn 20232.34-52.amzn2023.0.6
glibc-all-langpacksamzn 20232.34-52.amzn2023.0.6
glibc-benchtestsamzn 20232.34-52.amzn2023.0.6
glibc-benchtests-debuginfoamzn 20232.34-52.amzn2023.0.6
glibc-commonamzn 20232.34-52.amzn2023.0.6
glibc-common-debuginfoamzn 20232.34-52.amzn2023.0.6
glibc-debuginfoamzn 20232.34-52.amzn2023.0.6
glibc-debugsourceamzn 20232.34-52.amzn2023.0.6
glibc-develamzn 20232.34-52.amzn2023.0.6
glibc-docamzn 20232.34-52.amzn2023.0.6
glibc-gconv-extraamzn 20232.34-52.amzn2023.0.6
glibc-gconv-extra-debuginfoamzn 20232.34-52.amzn2023.0.6
glibc-headers-x86amzn 20232.34-52.amzn2023.0.6
glibc-langpack-aaamzn 20232.34-52.amzn2023.0.6
glibc-langpack-afamzn 20232.34-52.amzn2023.0.6
glibc-langpack-agramzn 20232.34-52.amzn2023.0.6
glibc-langpack-akamzn 20232.34-52.amzn2023.0.6
glibc-langpack-amamzn 20232.34-52.amzn2023.0.6
glibc-langpack-anamzn 20232.34-52.amzn2023.0.6
glibc-langpack-anpamzn 20232.34-52.amzn2023.0.6
glibc-langpack-aramzn 20232.34-52.amzn2023.0.6
glibc-langpack-asamzn 20232.34-52.amzn2023.0.6
glibc-langpack-astamzn 20232.34-52.amzn2023.0.6
glibc-langpack-aycamzn 20232.34-52.amzn2023.0.6
glibc-langpack-azamzn 20232.34-52.amzn2023.0.6
glibc-langpack-beamzn 20232.34-52.amzn2023.0.6
glibc-langpack-bemamzn 20232.34-52.amzn2023.0.6
glibc-langpack-beramzn 20232.34-52.amzn2023.0.6
glibc-langpack-bgamzn 20232.34-52.amzn2023.0.6
glibc-langpack-bhbamzn 20232.34-52.amzn2023.0.6
glibc-langpack-bhoamzn 20232.34-52.amzn2023.0.6
glibc-langpack-biamzn 20232.34-52.amzn2023.0.6
glibc-langpack-bnamzn 20232.34-52.amzn2023.0.6
glibc-langpack-boamzn 20232.34-52.amzn2023.0.6
glibc-langpack-bramzn 20232.34-52.amzn2023.0.6
glibc-langpack-brxamzn 20232.34-52.amzn2023.0.6
glibc-langpack-bsamzn 20232.34-52.amzn2023.0.6
glibc-langpack-bynamzn 20232.34-52.amzn2023.0.6
glibc-langpack-caamzn 20232.34-52.amzn2023.0.6
glibc-langpack-ceamzn 20232.34-52.amzn2023.0.6
glibc-langpack-chramzn 20232.34-52.amzn2023.0.6
glibc-langpack-ckbamzn 20232.34-52.amzn2023.0.6
glibc-langpack-cmnamzn 20232.34-52.amzn2023.0.6
glibc-langpack-crhamzn 20232.34-52.amzn2023.0.6
glibc-langpack-csamzn 20232.34-52.amzn2023.0.6
glibc-langpack-csbamzn 20232.34-52.amzn2023.0.6
glibc-langpack-cvamzn 20232.34-52.amzn2023.0.6
glibc-langpack-cyamzn 20232.34-52.amzn2023.0.6
glibc-langpack-daamzn 20232.34-52.amzn2023.0.6
glibc-langpack-deamzn 20232.34-52.amzn2023.0.6
glibc-langpack-doiamzn 20232.34-52.amzn2023.0.6
glibc-langpack-dsbamzn 20232.34-52.amzn2023.0.6
glibc-langpack-dvamzn 20232.34-52.amzn2023.0.6
glibc-langpack-dzamzn 20232.34-52.amzn2023.0.6
glibc-langpack-elamzn 20232.34-52.amzn2023.0.6
glibc-langpack-enamzn 20232.34-52.amzn2023.0.6
glibc-langpack-eoamzn 20232.34-52.amzn2023.0.6
glibc-langpack-esamzn 20232.34-52.amzn2023.0.6
glibc-langpack-etamzn 20232.34-52.amzn2023.0.6
glibc-langpack-euamzn 20232.34-52.amzn2023.0.6
glibc-langpack-faamzn 20232.34-52.amzn2023.0.6
glibc-langpack-ffamzn 20232.34-52.amzn2023.0.6
glibc-langpack-fiamzn 20232.34-52.amzn2023.0.6
glibc-langpack-filamzn 20232.34-52.amzn2023.0.6
glibc-langpack-foamzn 20232.34-52.amzn2023.0.6
glibc-langpack-framzn 20232.34-52.amzn2023.0.6
glibc-langpack-furamzn 20232.34-52.amzn2023.0.6
glibc-langpack-fyamzn 20232.34-52.amzn2023.0.6
glibc-langpack-gaamzn 20232.34-52.amzn2023.0.6
glibc-langpack-gdamzn 20232.34-52.amzn2023.0.6
glibc-langpack-gezamzn 20232.34-52.amzn2023.0.6
glibc-langpack-glamzn 20232.34-52.amzn2023.0.6
glibc-langpack-guamzn 20232.34-52.amzn2023.0.6
glibc-langpack-gvamzn 20232.34-52.amzn2023.0.6
glibc-langpack-haamzn 20232.34-52.amzn2023.0.6
glibc-langpack-hakamzn 20232.34-52.amzn2023.0.6
glibc-langpack-heamzn 20232.34-52.amzn2023.0.6
glibc-langpack-hiamzn 20232.34-52.amzn2023.0.6
glibc-langpack-hifamzn 20232.34-52.amzn2023.0.6
glibc-langpack-hneamzn 20232.34-52.amzn2023.0.6
glibc-langpack-hramzn 20232.34-52.amzn2023.0.6
glibc-langpack-hsbamzn 20232.34-52.amzn2023.0.6
glibc-langpack-htamzn 20232.34-52.amzn2023.0.6
glibc-langpack-huamzn 20232.34-52.amzn2023.0.6
glibc-langpack-hyamzn 20232.34-52.amzn2023.0.6
glibc-langpack-iaamzn 20232.34-52.amzn2023.0.6
glibc-langpack-idamzn 20232.34-52.amzn2023.0.6
glibc-langpack-igamzn 20232.34-52.amzn2023.0.6
glibc-langpack-ikamzn 20232.34-52.amzn2023.0.6
glibc-langpack-isamzn 20232.34-52.amzn2023.0.6
glibc-langpack-itamzn 20232.34-52.amzn2023.0.6
glibc-langpack-iuamzn 20232.34-52.amzn2023.0.6
glibc-langpack-jaamzn 20232.34-52.amzn2023.0.6
glibc-langpack-kaamzn 20232.34-52.amzn2023.0.6
glibc-langpack-kabamzn 20232.34-52.amzn2023.0.6
glibc-langpack-kkamzn 20232.34-52.amzn2023.0.6
glibc-langpack-klamzn 20232.34-52.amzn2023.0.6
glibc-langpack-kmamzn 20232.34-52.amzn2023.0.6
glibc-langpack-knamzn 20232.34-52.amzn2023.0.6
glibc-langpack-koamzn 20232.34-52.amzn2023.0.6
glibc-langpack-kokamzn 20232.34-52.amzn2023.0.6
glibc-langpack-ksamzn 20232.34-52.amzn2023.0.6
glibc-langpack-kuamzn 20232.34-52.amzn2023.0.6
glibc-langpack-kwamzn 20232.34-52.amzn2023.0.6
glibc-langpack-kyamzn 20232.34-52.amzn2023.0.6
glibc-langpack-lbamzn 20232.34-52.amzn2023.0.6
glibc-langpack-lgamzn 20232.34-52.amzn2023.0.6
glibc-langpack-liamzn 20232.34-52.amzn2023.0.6
glibc-langpack-lijamzn 20232.34-52.amzn2023.0.6
glibc-langpack-lnamzn 20232.34-52.amzn2023.0.6
glibc-langpack-loamzn 20232.34-52.amzn2023.0.6
glibc-langpack-ltamzn 20232.34-52.amzn2023.0.6
glibc-langpack-lvamzn 20232.34-52.amzn2023.0.6
glibc-langpack-lzhamzn 20232.34-52.amzn2023.0.6
glibc-langpack-magamzn 20232.34-52.amzn2023.0.6
glibc-langpack-maiamzn 20232.34-52.amzn2023.0.6
glibc-langpack-mfeamzn 20232.34-52.amzn2023.0.6
glibc-langpack-mgamzn 20232.34-52.amzn2023.0.6
glibc-langpack-mhramzn 20232.34-52.amzn2023.0.6
glibc-langpack-miamzn 20232.34-52.amzn2023.0.6
glibc-langpack-miqamzn 20232.34-52.amzn2023.0.6
glibc-langpack-mjwamzn 20232.34-52.amzn2023.0.6
glibc-langpack-mkamzn 20232.34-52.amzn2023.0.6
glibc-langpack-mlamzn 20232.34-52.amzn2023.0.6
glibc-langpack-mnamzn 20232.34-52.amzn2023.0.6
glibc-langpack-mniamzn 20232.34-52.amzn2023.0.6
glibc-langpack-mnwamzn 20232.34-52.amzn2023.0.6
glibc-langpack-mramzn 20232.34-52.amzn2023.0.6
glibc-langpack-msamzn 20232.34-52.amzn2023.0.6
glibc-langpack-mtamzn 20232.34-52.amzn2023.0.6
glibc-langpack-myamzn 20232.34-52.amzn2023.0.6
glibc-langpack-nanamzn 20232.34-52.amzn2023.0.6
glibc-langpack-nbamzn 20232.34-52.amzn2023.0.6
glibc-langpack-ndsamzn 20232.34-52.amzn2023.0.6
glibc-langpack-neamzn 20232.34-52.amzn2023.0.6
glibc-langpack-nhnamzn 20232.34-52.amzn2023.0.6
glibc-langpack-niuamzn 20232.34-52.amzn2023.0.6
glibc-langpack-nlamzn 20232.34-52.amzn2023.0.6
glibc-langpack-nnamzn 20232.34-52.amzn2023.0.6
glibc-langpack-nramzn 20232.34-52.amzn2023.0.6
glibc-langpack-nsoamzn 20232.34-52.amzn2023.0.6
glibc-langpack-ocamzn 20232.34-52.amzn2023.0.6
glibc-langpack-omamzn 20232.34-52.amzn2023.0.6
glibc-langpack-oramzn 20232.34-52.amzn2023.0.6
glibc-langpack-osamzn 20232.34-52.amzn2023.0.6
glibc-langpack-paamzn 20232.34-52.amzn2023.0.6
glibc-langpack-papamzn 20232.34-52.amzn2023.0.6
glibc-langpack-plamzn 20232.34-52.amzn2023.0.6
glibc-langpack-psamzn 20232.34-52.amzn2023.0.6
glibc-langpack-ptamzn 20232.34-52.amzn2023.0.6
glibc-langpack-quzamzn 20232.34-52.amzn2023.0.6
glibc-langpack-rajamzn 20232.34-52.amzn2023.0.6
glibc-langpack-roamzn 20232.34-52.amzn2023.0.6
glibc-langpack-ruamzn 20232.34-52.amzn2023.0.6
glibc-langpack-rwamzn 20232.34-52.amzn2023.0.6
glibc-langpack-saamzn 20232.34-52.amzn2023.0.6
glibc-langpack-sahamzn 20232.34-52.amzn2023.0.6
glibc-langpack-satamzn 20232.34-52.amzn2023.0.6
glibc-langpack-scamzn 20232.34-52.amzn2023.0.6
glibc-langpack-sdamzn 20232.34-52.amzn2023.0.6
glibc-langpack-seamzn 20232.34-52.amzn2023.0.6
glibc-langpack-sgsamzn 20232.34-52.amzn2023.0.6
glibc-langpack-shnamzn 20232.34-52.amzn2023.0.6
glibc-langpack-shsamzn 20232.34-52.amzn2023.0.6
glibc-langpack-siamzn 20232.34-52.amzn2023.0.6
glibc-langpack-sidamzn 20232.34-52.amzn2023.0.6
glibc-langpack-skamzn 20232.34-52.amzn2023.0.6
glibc-langpack-slamzn 20232.34-52.amzn2023.0.6
glibc-langpack-smamzn 20232.34-52.amzn2023.0.6
glibc-langpack-soamzn 20232.34-52.amzn2023.0.6
glibc-langpack-sqamzn 20232.34-52.amzn2023.0.6
glibc-langpack-sramzn 20232.34-52.amzn2023.0.6
glibc-langpack-ssamzn 20232.34-52.amzn2023.0.6
glibc-langpack-stamzn 20232.34-52.amzn2023.0.6
glibc-langpack-svamzn 20232.34-52.amzn2023.0.6
glibc-langpack-swamzn 20232.34-52.amzn2023.0.6
glibc-langpack-szlamzn 20232.34-52.amzn2023.0.6
glibc-langpack-taamzn 20232.34-52.amzn2023.0.6
glibc-langpack-tcyamzn 20232.34-52.amzn2023.0.6
glibc-langpack-teamzn 20232.34-52.amzn2023.0.6
glibc-langpack-tgamzn 20232.34-52.amzn2023.0.6
glibc-langpack-thamzn 20232.34-52.amzn2023.0.6
glibc-langpack-theamzn 20232.34-52.amzn2023.0.6
glibc-langpack-tiamzn 20232.34-52.amzn2023.0.6
glibc-langpack-tigamzn 20232.34-52.amzn2023.0.6
glibc-langpack-tkamzn 20232.34-52.amzn2023.0.6
glibc-langpack-tlamzn 20232.34-52.amzn2023.0.6
glibc-langpack-tnamzn 20232.34-52.amzn2023.0.6
glibc-langpack-toamzn 20232.34-52.amzn2023.0.6
glibc-langpack-tpiamzn 20232.34-52.amzn2023.0.6
glibc-langpack-tramzn 20232.34-52.amzn2023.0.6
glibc-langpack-tsamzn 20232.34-52.amzn2023.0.6
glibc-langpack-ttamzn 20232.34-52.amzn2023.0.6
glibc-langpack-ugamzn 20232.34-52.amzn2023.0.6
glibc-langpack-ukamzn 20232.34-52.amzn2023.0.6
glibc-langpack-unmamzn 20232.34-52.amzn2023.0.6
glibc-langpack-uramzn 20232.34-52.amzn2023.0.6
glibc-langpack-uzamzn 20232.34-52.amzn2023.0.6
glibc-langpack-veamzn 20232.34-52.amzn2023.0.6

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Patch now CVE-2023-4911 compat-libpthread-nonshared: The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math librar...7.8 0.6377 KEVExploited
High CVE-2023-4813 compat-libpthread-nonshared: The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math librar...7.8 0.0193 None reported
High CVE-2023-4527 Glibc: stack read overflow in getaddrinfo in no-aaaa mode7.8 0.0167 None reported
High CVE-2023-4806 glibc-source: A flaw has been identified in glibc7.8 0.0161 None reported
Showing 1 to 4 of 4 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.