Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-5391: CVE-2018-3646: CVE-2018-3620: CVE-2018-3615:
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | kernel | 0:4.14.62-70.117.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo | 0:4.14.62-70.117.amzn2 |
| Amazon Linux · 2 | kernel-debuginfo-common-x86_64 | 0:4.14.62-70.117.amzn2 |
| Amazon Linux · 2 | kernel-devel | 0:4.14.62-70.117.amzn2 |
| Amazon Linux · 2 | kernel-headers | 0:4.14.62-70.117.amzn2 |
| Amazon Linux · 2 | kernel-tools | 0:4.14.62-70.117.amzn2 |
| Amazon Linux · 2 | kernel-tools-debuginfo | 0:4.14.62-70.117.amzn2 |
| Amazon Linux · 2 | kernel-tools-devel | 0:4.14.62-70.117.amzn2 |
| Amazon Linux · 2 | perf | 0:4.14.62-70.117.amzn2 |
| Amazon Linux · 2 | perf-debuginfo | 0:4.14.62-70.117.amzn2 |
| Amazon Linux · 2 | python-perf | 0:4.14.62-70.117.amzn2 |
| Amazon Linux · 2 | python-perf-debuginfo | 0:4.14.62-70.117.amzn2 |
Vulnerabilities 4
-
High 7.3
Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow …
-
Medium 5.6
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure…
-
Medium 5.6
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure…
-
Unscored —
The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets
The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various…