ALAS-2023-1833

Related Vulnerabilities: CVE-2022-47022  

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c. (CVE-2022-47022)

ALAS-2023-1833


Amazon Linux AMI Security Advisory: ALAS-2023-1833
Advisory Release Date: 2023-09-13 23:15 Pacific
Advisory Updated Date: 2023-09-25 20:12 Pacific
Severity: Medium

Issue Overview:

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c. (CVE-2022-47022)


Affected Packages:

hwloc


Issue Correction:
Run yum update hwloc to update your system.

New Packages:
i686:
    hwloc-debuginfo-1.7-3.8.amzn1.i686
    hwloc-libs-1.7-3.8.amzn1.i686
    hwloc-gui-1.7-3.8.amzn1.i686
    hwloc-1.7-3.8.amzn1.i686
    hwloc-devel-1.7-3.8.amzn1.i686

src:
    hwloc-1.7-3.8.amzn1.src

x86_64:
    hwloc-devel-1.7-3.8.amzn1.x86_64
    hwloc-libs-1.7-3.8.amzn1.x86_64
    hwloc-debuginfo-1.7-3.8.amzn1.x86_64
    hwloc-1.7-3.8.amzn1.x86_64
    hwloc-gui-1.7-3.8.amzn1.x86_64