Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-66004: A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | usbmuxd | 0:1.1.0-1.amzn2.0.3 |
| Amazon Linux · 2 | usbmuxd-debuginfo | 0:1.1.0-1.amzn2.0.3 |
Vulnerabilities 1
-
Medium 5.7
Local privilege escalation in usbmuxd from arbitrary local user to usbmux
A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-66004.html