[ALAS-2023-1866] Amazon Linux AMI 2014.03 - ALAS-2023-1866: important priority package update for amazon-ssm-agent

Package updates are available for Amazon Linux AMI that fix the following vulnerabilities:
CVE-2023-24540:
html/template: improper handling of JavaScript whitespace.

Not all valid JavaScript whitespace characters were considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.

CVE-2023-24538:
Templates did not properly consider backticks (`) as Javascript string delimiters, and as such did
not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template
contained a Go template action within a Javascript template literal, the contents of the action could
be used to terminate the literal, injecting arbitrary Javascript code into the Go template.

CVE-2022-41723:
http2/hpack: avoid quadratic complexity in hpack decoding

CVE-2021-43565:
The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.