Wind River Support Network

HomeDefectsLIN1019-10664

Fixed

LIN1019-10664 : Security Advisory - consul - CVE-2023-5332

Created: Dec 4, 2023 Updated: Dec 11, 2023

Resolved Date: Dec 11, 2023

Found In Version: 10.19.45.1

Severity: Standard

Applicable for: Wind River Linux LTS 19

Component/s: Userspace

Description

Patch in third party library Consul requires 'enable-script-checks' to be set to False. This was required to enable a patch by the vendor. Without this setting the patch could be bypassed. This only affects GitLab-EE.

CREATE(Triage):(User=admin) CVE-2023-5332 (https://nvd.nist.gov/vuln/detail/CVE-2023-5332)