2,033 results · Clear filters · Feed
-
Medium max 6.9ALAS2023-2025-1157 1 CVE
Moderate: mod_security security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-54571: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11 and below, an attacke…
first Aug 20, 2025 -
Medium max 6.5ALAS2023-2025-1156 1 CVE
Moderate: perl-Authen-SASL security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-40918: Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce (client nonce) is generated from an MD…
first Aug 18, 2025 -
Medium max 8.1ALAS2023-2025-1155 4 CVEs
Moderate: libssh security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-5987: If there is an error in initializing ChaCha20 cipher with OpenSSL, an invalid error code is returned. This can happen if there is an heap exhaustion. Th…
first Aug 18, 2025 -
Medium max 5.3ALAS2023-2025-1153 1 CVE
Moderate: libtiff security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-8176: A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file to…
first Aug 18, 2025 -
MediumALAS2-2025-2990 1 CVE
Moderate: ruby security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2016-2338: An exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function of Ruby. In Psych::Emitter start_document function heap buf…
first Aug 27, 2025 -
Medium max 2.9ALAS2-2025-2989 1 CVE
Moderate: cairo security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-50422: An issue was discovered in freedesktop poppler v25.04.0. The heap memory containing PDF stream objects is not cleared upon program exit, allowing attacker…
first Aug 27, 2025 -
Medium max 5.3ALAS2-2025-2986 1 CVE
Moderate: compat-libtiff3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-8851: A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of t…
first Aug 26, 2025 -
Medium max 7.1ALAS2-2025-2985 2 CVEs
Moderate: krb5 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-3576: A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum …
first Aug 22, 2025 -
Medium max 6.3ALAS2-2025-2982 1 CVE
Moderate: httpd security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-54090: A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond expr ..." tests evaluating as "true". Users are recommended to upgrade to version 2.4.65, w…
first Aug 21, 2025 -
Medium max 6.9ALAS2-2025-2981 1 CVE
Moderate: mod_security security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-54571: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11 and below, an attacker c…
first Aug 21, 2025 -
Medium max 7.2ALAS2-2025-2978 1 CVE
Moderate: rust security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-6965: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could …
first Aug 18, 2025 -
Medium max 4.9ALAS2-2025-2976 1 CVE
Moderate: 389-ds-base security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-2487: A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function ret…
first Aug 13, 2025 -
Medium max 2.9ALAS2-2025-2974 3 CVEs
Moderate: LibRaw security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-43963: In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp allows out-of-buffer access because split_col and split_row values are not checked…
first Aug 13, 2025 -
Medium max 7.2ALAS2-2025-2973 1 CVE
Moderate: sqlite security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-6965: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could …
first Aug 13, 2025 -
Medium max 8.8ALAS2-2025-2972 1 CVE
Moderate: gstreamer-plugins-bad-free security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-40474: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video NOTE: https://gstreamer.freedesktop.org/security/sa-2023-0006.html…
first Aug 12, 2025 -
Medium max 6.9ALAS2-2025-2971 4 CVEs
Moderate: gstreamer1-plugins-base security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-47835: GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been detected in the parse_lrc f…
first Aug 12, 2025 -
Medium max 6.5ALAS2-2025-2969 1 CVE
Moderate: gnutls security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-32990: A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain…
first Aug 12, 2025 -
Medium max 6.5ALAS2-2025-2967 1 CVE
Moderate: perl-Authen-SASL security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-40918: Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce (client nonce) is generated from an MD5 h…
first Aug 12, 2025 -
Medium max 5.3ALAS2-2025-2965 2 CVEs
Moderate: libtiff security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-8177: A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file tools/thumbnail.c. The …
first Aug 12, 2025 -
Medium max 8.6ALAS2-2025-2964 18 CVEs
Moderate: gstreamer1-plugins-good security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-47834: GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the proces…
first Aug 5, 2025 -
Medium max 6.5ALAS2-2025-2963 1 CVE
Moderate: mod_security security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-52891: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.8 to before 2.9.11, an empt…
first Aug 5, 2025 -
Medium max 7.2ALAS2023-2025-1151 1 CVE
Moderate: sqlite security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6965: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This cou…
first Aug 13, 2025 -
Medium max 7.5ALAS2023-2025-1143 2 CVEs
Moderate: cni-plugins security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4673: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-22874: Callin…
first Aug 6, 2025 -
Medium max 3.3ALAS2023-2025-1142 1 CVE
Moderate: openexr security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-31047: An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service (DoS) via the convert function …
first Aug 5, 2025 -
Medium max 7.5ALAS2023-2025-1141 2 CVEs
Moderate: libcap security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4673: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-22874: Callin…
first Aug 5, 2025 -
Medium max 6.5ALAS2023-2025-1140 4 CVEs
Moderate: gnutls security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6395: A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite(). When it reads certain settings from a template …
first Aug 5, 2025 -
Medium max 6.5ALAS2023-2025-1139 1 CVE
Moderate: mod_security security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-52891: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.8 to before 2.9.11, an e…
first Aug 5, 2025 -
Medium max 4.1ALAS2023-2025-1138 2 CVEs
Moderate: vim security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-53906: Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim's zip.vim plugin can allow overwriting of arb…
first Aug 5, 2025 -
Medium max 7.2ALAS2023-2025-1137 1 CVE
Moderate: nodejs22 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6965: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This cou…
first Aug 5, 2025 -
Medium max 5.9ALAS2023-2025-1133 1 CVE
Moderate: libmicrohttpd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-27371: GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c …
first Jul 29, 2025 -
Medium max 4.7ALAS2023-2025-1132 1 CVE
Moderate: pam security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-10041: A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending c…
first Jul 29, 2025 -
Medium max 7.5ALAS2023-2025-1131 1 CVE
Moderate: ruby3.2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-24294: The attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the length of a decompressed domain n…
first Jul 29, 2025 -
Medium max 8.7ALAS2023-2025-1127 1 CVE
Moderate: jackson-core security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-52999: jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2…
first Jul 29, 2025 -
Medium max 7.4ALAS2023-2025-1126 3 CVEs
Moderate: ImageMagick security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-53101: ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagi…
first Jul 29, 2025 -
Medium max 3.1ALAS2023-2025-1123 1 CVE
Moderate: nodejs security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-5889: A vulnerability was found in juliangruber brace-expansion up to 1.1.11/2.0.1/3.0.0/4.0.0. It has been rated as problematic. Affected by this issue is th…
first Jul 29, 2025 -
Medium max 7.8ALAS2023-2025-1121 1 CVE
Moderate: pam security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6020: A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate …
first Jul 29, 2025 -
Medium max 4.3ALAS2023-2025-1118 1 CVE
Moderate: ghostscript security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-7462: A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classified as problematic. This affects the fu…
first Jul 29, 2025 -
Medium max 4.3ALAS2023-2025-1116 1 CVE
Moderate: python3.11 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6069: The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified d…
first Jul 26, 2025 -
Medium max 6.5ALAS2023-2025-1115 1 CVE
Moderate: ruby3.2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6442: Ruby WEBrick read_header HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected…
first Jul 26, 2025 -
Medium max 5.9ALAS2023-2025-1114 3 CVEs
Moderate: php8.3 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6491: If a SoapVar instance is created with a fully qualified name larger than 2G, this will cause a NULL pointer dereference resulting in a segmentation faul…
first Jul 26, 2025