2,507 results · Clear filters · Feed
-
High max 8.6ALAS2023-2024-718 1 CVE
Important: cups-filters security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-47175: A flaw in cups-filters allows a remote unauthenticated client to create a PPD configuration file with code injection. If a job is sent to the compromis…
first Sep 27, 2024 -
High max 7.0ALAS2023-2024-717 2 CVEs
Important: redis6 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-31449: Lua library commands may be exploited by an authenticated user to achieve remote-code-execution CVE-2024-31228: Denial-of-service due to unbounded patt…
first Sep 26, 2024 -
High max 7.5ALAS2-2024-2643 3 CVEs
Important: golang security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-34158: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion. CVE-2024-34156: Calling Decoder.De…
first Sep 25, 2024 -
High max 7.8ALAS2-2024-2642 1 CVE
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-39494: In the Linux kernel, the following vulnerability has been resolved: ima: Fix use-after-free on a dentry's dname.name
first Sep 25, 2024 -
High max 8.8ALAS2-2024-2641 1 CVE
Important: python-setuptools security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-6345: A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These fun…
first Sep 25, 2024 -
High max 7.5ALAS2-2024-2640 1 CVE
Important: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-6604: Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presu…
first Sep 25, 2024 -
High max 9.8ALAS2-2024-2638 4 CVEs
Important: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-8384: The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This coul…
first Sep 25, 2024 -
High max 7.8ALAS2023-2024-716 2 CVEs
Important: microcode_ctl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-22374: Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated user to potentially enable denial of service via loca…
first Sep 12, 2024 -
High max 8.8ALAS2-2024-2632 1 CVE
Important: python2-setuptools security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-6345: A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These fun…
first Sep 12, 2024 -
High max 10.0ALAS2-2024-2630 4 CVEs
Important: amazon-cloudwatch-agent security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-6104: go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic a…
first Aug 28, 2024 -
High max 9.8ALAS2-2024-2629 7 CVEs
Important: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-7529: The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerabil…
first Aug 28, 2024 -
High max 10.0ALAS2023-2024-708 4 CVEs
Important: amazon-cloudwatch-agent security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-6104: go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basi…
first Aug 28, 2024 -
High max 10.0ALAS2023-2024-542 7 CVEs
Important: docker security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-24557: Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if t…
first Feb 29, 2024 -
High max 9.8
Important: webkitgtk4 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-32409: N/A CVE-2023-32373: A use-after free bug in WebKit that could lead to arbitrary code execution when processing maliciously crafted web content. It was add…
first Jun 7, 2023 -
High max 7.5ALAS2-2024-2626 1 CVE
Important: linux-firmware security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-31315: Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is ena…
first Aug 14, 2024 -
High max 7.5ALAS2-2024-2625 1 CVE
Important: bind security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-4408: The DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffi…
first Aug 14, 2024 -
High max 7.8ALAS2-2024-2624 2 CVEs
Important: qemu security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-4467: A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block dev…
first Aug 14, 2024 -
High max 6.5ALAS2-2024-2623 4 CVEs
Important: webkitgtk4 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-40789: An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and …
first Aug 14, 2024 -
High max 7.5ALAS2023-2024-706 1 CVE
Important: linux-firmware security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-31315: Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is …
first Aug 14, 2024 -
High max 8.8ALAS2023-2024-702 1 CVE
Important: postgresql15 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-7348: Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user runni…
first Aug 14, 2024 -
High max 7.5ALAS2-2024-2616 2 CVEs
Important: bind security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-1975: If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a…
first Aug 1, 2024 -
High max 9.0ALAS2-2024-2611 1 CVE
Important: freeradius security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-3596: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Ac…
first Aug 1, 2024 -
High max 9.8ALAS2-2024-2608 4 CVEs
Important: emacs security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-39331: In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-t…
first Aug 1, 2024 -
High max 5.3ALAS2-2024-2606 1 CVE
Important: httpd security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-40725: A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "Ad…
first Aug 1, 2024 -
High max 7.0ALAS2-2024-2603 1 CVE
Important: gtk2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-6655: gtk3: gtk2: Library injection from CWD
first Aug 1, 2024 -
High max 7.0ALAS2-2024-2602 1 CVE
Important: gtk3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-6655: gtk3: gtk2: Library injection from CWD
first Aug 1, 2024 -
High max 8.1ALAS2023-2024-686 3 CVEs
Important: dotnet8.0 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-38095: .NET and Visual Studio Denial of Service Vulnerability CVE-2024-35264: .NET and Visual Studio Remote Code Execution Vulnerability CVE-2024-30105: .NET …
first Aug 1, 2024 -
High max 7.5ALAS2023-2024-685 1 CVE
Important: dotnet6.0 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-38095: .NET and Visual Studio Denial of Service Vulnerability
first Aug 1, 2024 -
High max 5.3ALAS2023-2024-681 1 CVE
Important: httpd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-40725: A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. …
first Aug 1, 2024 -
High max 7.5ALAS2023-2024-680 3 CVEs
Important: bind security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-4076: Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure. This i…
first Aug 1, 2024 -
High max 8.8ALAS2023-2024-676 1 CVE
Important: python-setuptools security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-6345: A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These …
first Aug 1, 2024 -
High max 7.0ALAS2023-2024-675 1 CVE
Important: gtk3 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-6655: gtk3: gtk2: Library injection from CWD
first Aug 1, 2024 -
HighALAS2-2024-2601 17 CVEs
Important: audiofile security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-18781: Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be t…
first Jul 18, 2024 -
High max 7.8ALAS2-2024-2589 2 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-47112: In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Teardown PV features on boot CPU as well CVE-2021-47110: In the Linux kernel,…
first Jul 3, 2024 -
High max 8.8ALAS2-2023-2340 4 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-5717: A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege…
first Nov 9, 2023 -
High max 7.4ALAS2023-2024-671 6 CVEs
Important: java-1.8.0-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-21147: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supporte…
first Jul 18, 2024 -
High max 7.4ALAS2023-2024-670 6 CVEs
Important: java-11-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-21147: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supporte…
first Jul 18, 2024 -
High max 7.4ALAS2023-2024-669 5 CVEs
Important: java-17-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-21147: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supporte…
first Jul 18, 2024 -
High max 7.4ALAS2023-2024-668 5 CVEs
Important: java-21-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-21147: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supporte…
first Jul 18, 2024 -
High max 7.4ALAS2023-2024-667 5 CVEs
Important: java-22-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-21147: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supporte…
first Jul 18, 2024