2 matches found
Medium: ecs-init
Issue Overview: Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack. CVE-2023-3978 Affected Packages: ecs-init Issue Correction: Run dnf update ecs-init --releasever 2023.3.20240108 to update you...
SUSE-SU-2023:3522-1 Security update for amazon-ecs-init
This update of amazon-ecs-init fixes the following issues: - rebuild the package with the go 1.21 security release bsc1212475...