340 results · Clear filters · Feed
-
LowALAS2023-2025-1058 0 CVEs
Low: python-pip security update (Amazon Linux 2023)
first Jul 3, 2025 -
Low max 3.1ALAS2023-2025-1025 1 CVE
Low: valkey security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-49112: setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev->size - prev->used.
first Jun 18, 2025 -
LowALAS2023-2023-264 0 CVEs
Low: sqlite security update (Amazon Linux 2023)
first Jul 19, 2023 -
LowALAS2023-2025-992 0 CVEs
Low: librsvg2 security update (Amazon Linux 2023)
first May 27, 2025 -
Low max 2.9ALAS2023-2025-972 1 CVE
Low: ImageMagick security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-43965: In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used.
first May 21, 2025 -
Low max 2.9ALAS2-2025-2857 1 CVE
Low: ImageMagick security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-43965: In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used.
first May 21, 2025 -
LowALAS2023-2023-012 0 CVEs
Low: wget security update (Amazon Linux 2023)
first Feb 17, 2023 -
Low max 2.9ALAS2-2025-2855 1 CVE
Low: jetty security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-34428: For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session…
first May 8, 2025 -
LowALAS2-2025-2845 0 CVEs
Low: python-requests security update (Amazon Linux 2)
first Apr 23, 2025 -
Low max 5.3ALAS2-2025-2829 1 CVE
Low: tomcat security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-54677: Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to denial of service. This issue affects…
first Apr 9, 2025 -
Low max 3.5ALAS2-2025-2824 1 CVE
Low: edk2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-2295: EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerab…
first Apr 9, 2025 -
Low max 3.3ALAS2-2025-2811 1 CVE
Low: PackageKit security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-0217: A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some m…
first Mar 26, 2025 -
Low max 2.3ALAS2-2025-2808 1 CVE
Low: python3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-1795: During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also un…
first Mar 26, 2025 -
Low max 2.3ALAS2023-2025-917 1 CVE
Low: python3.9 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-1795: During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also…
first Mar 26, 2025 -
LowALAS2023-2025-891 0 CVEs
Low: xorg-x11-server-Xwayland security update (Amazon Linux 2023)
first Mar 6, 2025 -
Low max 7.5ALAS2-2025-2799 1 CVE
Low: python-pip security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-4032: The "ipaddress" module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as "globally reachable" or "private". …
first Mar 13, 2025 -
Low max 3.6ALAS2023-2025-886 1 CVE
Low: ecs-init security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-45310: runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, c…
first Feb 27, 2025 -
Low max 7.5ALAS2-2025-2762 1 CVE
Low: python3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-4032: The "ipaddress" module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as "globally reachable" or "private". …
first Feb 12, 2025 -
Low max 7.5ALAS2-2025-2761 1 CVE
Low: python-ipaddress security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-4032: The "ipaddress" module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as "globally reachable" or "private". …
first Feb 12, 2025 -
Low max 3.6ALAS2-2025-2758 1 CVE
Low: gsl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-50610: GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorr…
first Feb 12, 2025 -
Low max 3.6ALAS2023-2025-853 1 CVE
Low: gsl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-50610: GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, inc…
first Feb 12, 2025 -
Low max 3.1ALAS2023-2025-852 1 CVE
Low: docker security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-51744: golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in `ParseWithClaims` can lead to situation where user…
first Feb 12, 2025 -
LowALAS2023-2025-820 0 CVEs
Low: ansible-core security update (Amazon Linux 2023)
first Jan 21, 2025 -
Low max 4.3ALAS2-2024-2709 6 CVEs
Low: opensc security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-45620: It is caused by the libopensc library in opensc porject. This vulnerability affects how the buffer data is handled and partially filled buffers can be acc…
first Dec 5, 2024 -
Low max 4.3ALAS2023-2024-775 7 CVEs
Low: opensc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-8443: libopensc: Heap buffer overflow in OpenPGP driver when generating key CVE-2024-45620: It is caused by the libopensc library in opensc porject. This vuln…
first Dec 5, 2024 -
Low max 4.8ALAS2023-2024-760 2 CVEs
Low: unbound security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-43168: unbound: Heap-Buffer-Overflow in Unbound CVE-2024-43167: unbound: NULL Pointer Dereference in Unbound
first Nov 13, 2024 -
LowALAS2-2024-2685 3 CVEs
Low: gdb security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-39130: GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c. CVE-2023-39129: GNU…
first Oct 24, 2024 -
LowALAS2023-2024-738 3 CVEs
Low: gdb security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-39130: GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c. CVE-2023-39129: …
first Oct 10, 2024 -
Low max 3.6ALAS2023-2024-725 1 CVE
Low: runc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-45310: runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, c…
first Oct 10, 2024 -
LowALAS2-2024-2636 1 CVE
Low: systemd security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-31439: An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checkin…
first Sep 12, 2024 -
Low max 3.3ALAS2-2024-2628 1 CVE
Low: cups security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-25317: A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStac…
first Aug 14, 2024 -
LowALAS2-2024-2619 1 CVE
Low: protobuf-c security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-33070: Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c. This vulnerabi…
first Aug 1, 2024 -
Low max 7.5ALAS2-2024-2607 1 CVE
Low: ca-certificates security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-39689: Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Cer…
first Aug 1, 2024 -
LowALAS2-2024-2605 0 CVEs
Low: openssl11 security update (Amazon Linux 2)
first Aug 1, 2024 -
Low max 7.5ALAS2023-2024-682 1 CVE
Low: ca-certificates security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-39689: Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. …
first Aug 1, 2024 -
Low max 3.1ALAS2023-2024-635 1 CVE
Low: postgresql15 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-4317: postgresql: PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks
first Jun 6, 2024 -
LowALAS2-2024-2559 1 CVE
Low: ImageMagick security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-20309: A flaw was found in ImageMagick, where a division by zero in WaveImage() of MagickCore/visual-effects.c may trigger undefined behavior via a crafted image…
first May 23, 2024 -
Low max 2.8ALAS2-2024-2552 1 CVE
Low: bpftrace security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-2313: If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc…
first May 23, 2024 -
Low max 2.8ALAS2-2024-2551 1 CVE
Low: bcc security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-2314: If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to l…
first May 23, 2024 -
Low max 2.8ALAS2023-2024-626 1 CVE
Low: bcc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-2314: If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc t…
first May 23, 2024