ALAS2-2025-2867 — Important: ppp security update (Amazon Linux 2)

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-58250: The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.

Fixed packages 3

Release	Package	Fixed in
Amazon Linux · 2	ppp	0:2.4.5-33.amzn2.0.4
Amazon Linux · 2	ppp-debuginfo	0:2.4.5-33.amzn2.0.4
Amazon Linux · 2	ppp-devel	0:2.4.5-33.amzn2.0.4

Vulnerabilities 1

Critical 9.3

CVE-2024-58250

The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.

Samba ppp ppp ppp Debian Ubuntu Azure Linux

Apr 22, 2025

References

web
https://alas.aws.amazon.com/cve/html/CVE-2024-58250.html