2,507 results · Clear filters · Feed
-
High max 8.6ALAS2-2025-2940 5 CVEs
Important: java-11-amazon-corretto security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-50106: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versio…
first Jul 17, 2025 -
High max 8.6ALAS2-2025-2939 1 CVE
Important: golang security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-4674: cmd/go: unexpected command execution in untrusted VCS repositories
first Jul 17, 2025 -
High max 9.1ALAS2-2025-2938 2 CVEs
Important: libxml2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-49796: libxml: Type confusion leads to Denial of service (DoS) CVE-2025-49794: libxml: Heap use after free (UAF) leads to Denial of service (DoS)
first Jul 17, 2025 -
High max 7.8ALAS2-2025-2937 1 CVE
Important: mtr security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-49809: mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable.
first Jul 17, 2025 -
High max 8.6ALAS2-2025-2936 4 CVEs
Important: java-17-amazon-corretto security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-50106: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versio…
first Jul 17, 2025 -
High max 9.8ALAS2-2025-2909 11 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-53143: In the Linux kernel, the following vulnerability has been resolved: ext4: fix another off-by-one fsmap error on 1k block filesystems CVE-2023-53141: In th…
first Jun 27, 2025 -
High max 8.8ALAS2-2022-1903 30 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-26607: In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c. CVE-2022-49874: In the Linux kernel, the following vulner…
first Dec 9, 2022 -
High max 7.8ALAS2-2020-1440 3 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-36791: In the Linux kernel, the following vulnerability has been resolved: net_sched: keep alloc_hash updated after hash allocation CVE-2020-12826: A flaw was fo…
first Jun 16, 2020 -
High max 8.8ALAS2023-2025-1053 9 CVEs
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-38095: In the Linux kernel, the following vulnerability has been resolved: dma-buf: insert memory barrier before updating num_fences CVE-2025-38023: In the Li…
first Jul 1, 2025 -
High max 7.8ALAS2023-2025-959 15 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22015: In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fix shmem xarray update during migration CVE-2025-22005: In the Linux k…
first May 6, 2025 -
High max 8.8ALAS2023-2025-948 38 CVEs
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-39989: In the Linux kernel, the following vulnerability has been resolved: x86/mce: use is_copy_from_user() to determine copy-from-user context CVE-2025-39688…
first Apr 23, 2025 -
High max 10.0ALAS2023-2025-947 22 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-38637: In the Linux kernel, the following vulnerability has been resolved: net_sched: skbprio: Remove overly strict queue assertions CVE-2025-37785: In the Li…
first Apr 23, 2025 -
High max 7.8ALAS2-2025-2929 3 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-37942: In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX CVE-2025-37923: I…
first Jul 2, 2025 -
High max 8.8ALAS2-2025-2926 1 CVE
Important: cloud-init security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-6174: When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configur…
first Jul 2, 2025 -
High max 8.8ALAS2-2025-2925 5 CVEs
Important: webkitgtk4 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-31257: This issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visi…
first Jul 2, 2025 -
High max 2.8ALAS2-2025-2924 1 CVE
Important: sudo security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-32462: Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute command…
first Jul 2, 2025 -
High max 7.5ALAS2-2025-2920 1 CVE
Important: tomcat security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-48976: Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache…
first Jul 2, 2025 -
High max 7.0ALAS2-2025-2914 1 CVE
Important: icu security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-5222: A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBR…
first Jul 2, 2025 -
High max 7.0ALAS2-2025-2913 1 CVE
Important: libicu60 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-5222: A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBR…
first Jul 2, 2025 -
High max 7.8ALAS2-2025-2912 1 CVE
Important: libarchive security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-5914: A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an …
first Jul 2, 2025 -
High max 8.8ALAS2023-2025-1082 1 CVE
Important: cloud-init security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-6174: When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default confi…
first Jul 3, 2025 -
High max 9.8ALAS2023-2025-1081 2 CVEs
Important: clamav1.4 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-20260: A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a d…
first Jul 3, 2025 -
High max 7.5ALAS2023-2025-1072 1 CVE
Important: dotnet8.0 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-30399: A remote code execution vulnerability in .NET 8.0 and 9.0. An attacker who can place malicious files in specific locations may trigger unintended code …
first Jul 3, 2025 -
High max 9.3
Important: sudo security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-32463: Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot opt…
first Jul 3, 2025 -
High max 3.7ALAS2023-2025-1069 2 CVEs
Important: glib2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6052: A flaw was found in how GLib's GString manages memory when adding data to strings. If a string is already very large, combining it with more input can c…
first Jul 3, 2025 -
High max 7.5ALAS2023-2025-1067 2 CVEs
Important: valkey security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-48367: Redis and Valkey contain a defect such that a well constructed hyperloglog can corrupt arbitrary memory on the heap, which could lead to remote code ex…
first Jul 3, 2025 -
High max 7.5ALAS2023-2025-1066 2 CVEs
Important: redis6 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-48367: Redis and Valkey contain a defect such that a well constructed hyperloglog can corrupt arbitrary memory on the heap, which could lead to remote code ex…
first Jul 3, 2025 -
High max 7.5ALAS2023-2025-1064 3 CVEs
Important: tomcat10 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-49125: Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Tomcat. When using PreResources or PostResources mounted other than at…
first Jul 3, 2025 -
High max 7.0ALAS2023-2025-1057 1 CVE
Important: icu security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-5222: A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the S…
first Jul 3, 2025 -
High max 9.8ALAS2023-2025-1055 4 CVEs
Important: firefox security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6430: When a file download is specified via the Content-Disposition header, that directive would be ignored if the file was included via a <embed> or <object>…
first Jul 3, 2025 -
HighALAS2-2019-1273 5 CVEs
Important: edk2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-3613: Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, in…
first Aug 23, 2019 -
High max 8.1ALAS2-2025-2859 3 CVEs
Important: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-3932: It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically acc…
first May 21, 2025 -
High max 8.8ALAS2-2025-2908 1 CVE
Important: perl-File-Find-Rule-Perl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2011-10007: File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle is opened with…
first Jun 18, 2025 -
High max 9.1ALAS2-2025-2905 1 CVE
Important: rclone security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-22871: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunctio…
first Jun 18, 2025 -
High max 8.8ALAS2-2025-2899 1 CVE
Important: apache-commons-beanutils security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-48734: Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers f…
first Jun 18, 2025 -
High max 5.4ALAS2-2025-2897 1 CVE
Important: libvpx security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-5283: Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. …
first Jun 18, 2025 -
High max 6.5ALAS2-2025-2896 1 CVE
Important: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-5986: A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without pro…
first Jun 18, 2025 -
High max 7.5ALAS2-2025-2893 1 CVE
Important: libxml2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-6021: A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This i…
first Jun 18, 2025 -
High max 8.8ALAS2023-2025-1048 1 CVE
Important: perl-File-Find-Rule security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2011-10007: File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle is opened w…
first Jun 18, 2025 -
High max 8.8ALAS2023-2025-1047 1 CVE
Important: perl-File-Find-Rule-Perl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2011-10007: File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle is opened w…
first Jun 18, 2025