ALAS2-2023-2237

Related Vulnerabilities: CVE-2022-47022  

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c. (CVE-2022-47022)

ALAS2-2023-2237


Amazon Linux 2 Security Advisory: ALAS-2023-2237
Advisory Release Date: 2023-08-31 22:30 Pacific
Advisory Updated Date: 2023-09-07 18:49 Pacific
Severity: Medium

Issue Overview:

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c. (CVE-2022-47022)


Affected Packages:

hwloc


Issue Correction:
Run yum update hwloc to update your system.

New Packages:
aarch64:
    hwloc-1.11.8-4.amzn2.0.2.aarch64
    hwloc-devel-1.11.8-4.amzn2.0.2.aarch64
    hwloc-libs-1.11.8-4.amzn2.0.2.aarch64
    hwloc-gui-1.11.8-4.amzn2.0.2.aarch64
    hwloc-plugins-1.11.8-4.amzn2.0.2.aarch64
    hwloc-debuginfo-1.11.8-4.amzn2.0.2.aarch64

i686:
    hwloc-1.11.8-4.amzn2.0.2.i686
    hwloc-devel-1.11.8-4.amzn2.0.2.i686
    hwloc-libs-1.11.8-4.amzn2.0.2.i686
    hwloc-gui-1.11.8-4.amzn2.0.2.i686
    hwloc-plugins-1.11.8-4.amzn2.0.2.i686
    hwloc-debuginfo-1.11.8-4.amzn2.0.2.i686

src:
    hwloc-1.11.8-4.amzn2.0.2.src

x86_64:
    hwloc-1.11.8-4.amzn2.0.2.x86_64
    hwloc-devel-1.11.8-4.amzn2.0.2.x86_64
    hwloc-libs-1.11.8-4.amzn2.0.2.x86_64
    hwloc-gui-1.11.8-4.amzn2.0.2.x86_64
    hwloc-plugins-1.11.8-4.amzn2.0.2.x86_64
    hwloc-debuginfo-1.11.8-4.amzn2.0.2.x86_64