shadow-maint/shadow

CVE-2023-4641 upgrade problem

Closed this issue · 1 comments

I found two source for CVE-2023-4641

upgrade to 4.14 https://nvd.nist.gov/vuln/detail/CVE-2023-4641
antoher said upgrade to 4.6-17 for RHEL 8.
I'm using rockylinux 9, which one should upgrade?
thanks.

Both statements could be true, depending on the specific Rocky Linux release where the fix was ported. Specifically, the fix was included in 4.6-19 for CentOS Stream 8 and 4.9-8 for CentOS Stream 9.

By the way, this isn't the right place for these questions. Please direct them to the Rocky Linux support team next time.