Skip to content
OpenAdvisories

Source

Amazon Linux Security Center (ALAS)

Source: https://alas.aws.amazon.com/

7 results · Clear filters · Feed

  • Medium max 7.8
    ALAS2-2024-2622 13 CVEs 1 exploited

    Moderate: kernel security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-42090: In the Linux kernel, the following vulnerability has been resolved: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER CVE-2024-42070: …

    first Aug 14, 2024
  • Medium max 7.8
    ALAS2023-2024-658 1 CVE 1 exploited

    Moderate: kernel security update (Amazon Linux 2023)

    Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-36971: In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race

    first Jul 18, 2024
  • Medium max 7.5
    ALAS2-2024-2577 2 CVEs 1 exploited

    Moderate: webkitgtk4 security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-27834: The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, Safari 17.5, watchOS 10.5, macOS Sonoma 14.5. An…

    first Jun 19, 2024
  • Medium max 8.8
    ALAS2-2022-1747 1 CVE 1 exploited

    Moderate: webkitgtk4 security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-30858: A flaw was found in webkitgtk. This flaw could allow an attacker to use maliciously crafted web content leading to arbitrary code execution.

    first Feb 3, 2022
  • Medium max 6.9
    ALAS2-2021-1626 1 CVE 1 exploited

    Moderate: ipa security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-11023: A flaw was found in jQuery. HTML containing <option> elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulatio…

    first Apr 20, 2021
  • Medium max 7.8
    ALAS2-2021-1584 2 CVEs 1 exploited

    Moderate: php-pear security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-28949: Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwr…

    first Jan 5, 2021
  • Medium max 8.8
    ALAS2-2020-1563 101 CVEs 2 exploited

    Moderate: webkitgtk4 security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-3902: An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for…

    first Nov 9, 2020