Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-1647: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS).This issue affects Bootstrap: from 3.4.1 before 4.0.0.
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | pki-base | 0:10.5.18-27.amzn2.0.3 |
| Amazon Linux · 2 | pki-base-java | 0:10.5.18-27.amzn2.0.3 |
| Amazon Linux · 2 | pki-ca | 0:10.5.18-27.amzn2.0.3 |
| Amazon Linux · 2 | pki-core-debuginfo | 0:10.5.18-27.amzn2.0.3 |
| Amazon Linux · 2 | pki-javadoc | 0:10.5.18-27.amzn2.0.3 |
| Amazon Linux · 2 | pki-kra | 0:10.5.18-27.amzn2.0.3 |
| Amazon Linux · 2 | pki-server | 0:10.5.18-27.amzn2.0.3 |
| Amazon Linux · 2 | pki-symkey | 0:10.5.18-27.amzn2.0.3 |
| Amazon Linux · 2 | pki-tools | 0:10.5.18-27.amzn2.0.3 |
Vulnerabilities 1
-
Medium 5.6
XSS in Bootstrap title attribute for Tooltip and Popover
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS).This issue affects Bootstrap: from 3.4.1 before 4.0.0.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-1647.html