68 results · Clear filters · Feed
-
Critical max 10.0
Critical: java-17-amazon-corretto security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-45046: It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attacke…
-
Critical max 10.0
Critical: aws-kinesis-agent security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-45046: A flaw was found in the Apache Log4j logging library in versions from 2.0.0 and before 2.16.0. A remote attacker with control over Thread Context Map (MDC…
-
CriticalALAS2-2021-1722 1 CVE
Critical: nss security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-43527: NSS (Network Security Services) up to and including 3.73 is vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Application…
-
CriticalALAS2-2021-1594 1 CVE
Critical: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-16044: No description is available for this CVE. 1913503: CVE-2020-16044 Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk
first Jan 25, 2021 -
Critical max 5.5
Critical: samba security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-1472: A flaw was found in the Microsoft Windows Netlogon Remote Protocol (MS-NRPC), where it reuses a known, static, zero-value initialization vector (IV) in AES…
first Jan 5, 2021 -
CriticalALAS2-2020-1572 7 CVEs
Critical: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-26950: No description is available for this CVE. 1896306: CVE-2020-26950 Mozilla: Write side effects in MCallGetProperty opcode not accounted for CVE-2020-15969:…
-
Critical max 8.1
Critical: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-6831: A flaw was found in Mozilla Firefox and Thunderbird. When parsing and validating SCTP chunks in WebRTC a memory buffer overflow could occur leading to memo…
first May 19, 2020 -
Critical max 9.8
Critical: openslp security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-5544: OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical s…
first Dec 16, 2019 -
Critical max 8.7
Critical: php security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-11043: In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to…
first Oct 31, 2019 -
CriticalALAS2-2019-1267 7 CVEs
Critical: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-9811: As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature t…
first Aug 8, 2019 -
CriticalALAS2-2019-1251 6 CVEs
Critical: dnsmasq security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-14496: An integer underflow flaw leading to a buffer over-read was found in dnsmasq in the EDNS0 code. An attacker could send crafted DNS packets to dnsmasq whic…
first Jul 18, 2019 -
Critical max 10.0
Critical: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-11708: 1722673: CVE-2019-11708 Mozilla: Sandbox escape using Prompt:Open CVE-2019-11707: 1721789: CVE-2019-11707 Mozilla: Type confusion in Array.pop CVE-2019-11…
first Jul 18, 2019 -
Critical max 7.5ALAS2-2019-1222 3 CVEs
Critical: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-11479: CVE-2019-11478: CVE-2019-11477:
first Jun 13, 2019 -
Critical max 5.3ALAS2-2019-1229 12 CVEs
Critical: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-9820: 1712629: CVE-2019-9820 Mozilla: Use-after-free of ChromeEventHandler by DocShell CVE-2019-9819: 1712628: CVE-2019-9819 Mozilla: Compartment mismatch with f…
first Jun 11, 2019 -
CriticalALAS2-2019-1195 10 CVEs
Critical: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-9813: 1692182: CVE-2019-9813 Mozilla: Ionmonkey type confusion with __proto__ mutations CVE-2019-9810: 1692181: CVE-2019-9810 Mozilla: IonMonkey MArraySlice has …
first Apr 25, 2019 -
CriticalALAS2-2019-1168 6 CVEs
Critical: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-18498: A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used instead of the chec…
first Mar 7, 2019 -
CriticalALAS2-2019-1157 4 CVEs
Critical: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-12393: 1642183: CVE-2018-12393 Mozilla: Integer overflow during Unicode conversion while loading JavaScript CVE-2018-12392: 1642182: CVE-2018-12392 Mozilla: Cras…
first Feb 13, 2019 -
CriticalALAS2-2018-1111 6 CVEs
Critical: java-1.7.0-openjdk security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-3214: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound). Supported versions that are affected are Java SE…
first Dec 6, 2018 -
CriticalALAS2-2018-1097 7 CVEs
Critical: java-1.8.0-openjdk security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-3214: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound). Supported versions that are affected are Java SE…
-
CriticalALAS2-2018-1061 11 CVEs
Critical: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-5188: 1595040: CVE-2018-5188 Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9 CVE-2018-12374: 1598543: CVE-2018-12374 thun…
-
Critical max 7.3ALAS2-2018-1058 4 CVEs
Critical: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-5391: CVE-2018-3646: CVE-2018-3620: CVE-2018-3615:
first Aug 10, 2018 -
CriticalALAS2-2018-1032 12 CVEs
Critical: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-5185: 1580241: CVE-2018-5185 Mozilla: Leaking plaintext through HTML forms CVE-2018-5184: 1580236: CVE-2018-5184 Mozilla: Full plaintext recovery in S/MIME via c…
first Jun 7, 2018 -
Critical max 7.5ALAS2-2018-1021 1 CVE
Critical: dhcp security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-1111: A command injection flaw was found in the NetworkManager integration script included in the DHCP client packages in Amazon Linux 2. A malicious DHCP server…
first May 24, 2018 -
Critical max 5.3ALAS2-2018-1007 10 CVEs
Critical: java-1.7.0-openjdk security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-2815: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
-
Critical max 5.3ALAS2-2018-1002 10 CVEs
Critical: java-1.8.0-openjdk security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-2815: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are…
-
CriticalALAS2-2018-998 1 CVE
Critical: librelp security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-1000140: rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in …
-
CriticalALAS2-2018-981 1 CVE
Critical: libvorbis security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-5146: An out of bounds write flaw was found in the processing of vorbis audio data. A maliciously crafted file or audio stream could cause the application to cra…
first Mar 22, 2018 -
Critical max 5.6ALAS2-2018-939 2 CVEs
Critical: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-5754: An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions (a commonly used perf…
first Jan 11, 2018