Lucene search

AmazonALAS-2022-1651

HistoryDec 01, 2022 - 5:34 p.m.

Important: python38

2022-12-0117:34:00

alas.aws.amazon.com

0.016 Low

EPSS

Percentile

87.4%

JSON

Issue Overview:

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface. (CVE-2022-37454)

Affected Packages:

python38

Issue Correction:
Run yum update python38 to update your system.

New Packages:

i686:  
    python38-tools-3.8.5-1.6.amzn1.i686  
    python38-libs-3.8.5-1.6.amzn1.i686  
    python38-3.8.5-1.6.amzn1.i686  
    python38-debug-3.8.5-1.6.amzn1.i686  
    python38-debuginfo-3.8.5-1.6.amzn1.i686  
    python38-test-3.8.5-1.6.amzn1.i686  
    python38-devel-3.8.5-1.6.amzn1.i686  
  
src:  
    python38-3.8.5-1.6.amzn1.src  
  
x86_64:  
    python38-debug-3.8.5-1.6.amzn1.x86_64  
    python38-test-3.8.5-1.6.amzn1.x86_64  
    python38-debuginfo-3.8.5-1.6.amzn1.x86_64  
    python38-tools-3.8.5-1.6.amzn1.x86_64  
    python38-devel-3.8.5-1.6.amzn1.x86_64  
    python38-libs-3.8.5-1.6.amzn1.x86_64  
    python38-3.8.5-1.6.amzn1.x86_64

Additional References

Red Hat: CVE-2022-37454

Mitre: CVE-2022-37454

OSVersionArchitecturePackageVersionFilename
Amazon Linux1i686python38-tools< 3.8.5-1.6.amzn1python38-tools-3.8.5-1.6.amzn1.i686.rpm
Amazon Linux1i686python38-libs< 3.8.5-1.6.amzn1python38-libs-3.8.5-1.6.amzn1.i686.rpm
Amazon Linux1i686python38< 3.8.5-1.6.amzn1python38-3.8.5-1.6.amzn1.i686.rpm
Amazon Linux1i686python38-debug< 3.8.5-1.6.amzn1python38-debug-3.8.5-1.6.amzn1.i686.rpm
Amazon Linux1i686python38-debuginfo< 3.8.5-1.6.amzn1python38-debuginfo-3.8.5-1.6.amzn1.i686.rpm
Amazon Linux1i686python38-test< 3.8.5-1.6.amzn1python38-test-3.8.5-1.6.amzn1.i686.rpm
Amazon Linux1i686python38-devel< 3.8.5-1.6.amzn1python38-devel-3.8.5-1.6.amzn1.i686.rpm
Amazon Linux1x86_64python38-debug< 3.8.5-1.6.amzn1python38-debug-3.8.5-1.6.amzn1.x86_64.rpm
Amazon Linux1x86_64python38-test< 3.8.5-1.6.amzn1python38-test-3.8.5-1.6.amzn1.x86_64.rpm
Amazon Linux1x86_64python38-debuginfo< 3.8.5-1.6.amzn1python38-debuginfo-3.8.5-1.6.amzn1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
Amazon Linux	1	i686	python38-tools	< 3.8.5-1.6.amzn1	python38-tools-3.8.5-1.6.amzn1.i686.rpm
Amazon Linux	1	i686	python38-libs	< 3.8.5-1.6.amzn1	python38-libs-3.8.5-1.6.amzn1.i686.rpm
Amazon Linux	1	i686	python38	< 3.8.5-1.6.amzn1	python38-3.8.5-1.6.amzn1.i686.rpm
Amazon Linux	1	i686	python38-debug	< 3.8.5-1.6.amzn1	python38-debug-3.8.5-1.6.amzn1.i686.rpm
Amazon Linux	1	i686	python38-debuginfo	< 3.8.5-1.6.amzn1	python38-debuginfo-3.8.5-1.6.amzn1.i686.rpm
Amazon Linux	1	i686	python38-test	< 3.8.5-1.6.amzn1	python38-test-3.8.5-1.6.amzn1.i686.rpm
Amazon Linux	1	i686	python38-devel	< 3.8.5-1.6.amzn1	python38-devel-3.8.5-1.6.amzn1.i686.rpm
Amazon Linux	1	x86_64	python38-debug	< 3.8.5-1.6.amzn1	python38-debug-3.8.5-1.6.amzn1.x86_64.rpm
Amazon Linux	1	x86_64	python38-test	< 3.8.5-1.6.amzn1	python38-test-3.8.5-1.6.amzn1.x86_64.rpm
Amazon Linux	1	x86_64	python38-debuginfo	< 3.8.5-1.6.amzn1	python38-debuginfo-3.8.5-1.6.amzn1.x86_64.rpm

Rows per page:

1-10 of 141