2,033 results · Clear filters · Feed
-
Medium max 5.3ALAS2-2025-2915 1 CVE
Moderate: python-urllib3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-50181: urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolMan…
first Jul 2, 2025 -
Medium max 4.3ALAS2-2025-2911 1 CVE
Moderate: python security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-6069: The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified deni…
first Jul 2, 2025 -
Medium max 5.5ALAS2-2025-2910 1 CVE
Moderate: libgepub security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-6196: A flaw was found in libgepub, a library used to read EPUB files. The software mishandles file size calculations when opening specially crafted EPUB files, …
first Jul 2, 2025 -
Medium max 5.3ALAS2023-2025-1083 1 CVE
Moderate: python3.12-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-47081: Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific mal…
first Jul 3, 2025 -
Medium max 7.5ALAS2023-2025-1079 2 CVEs
Moderate: oci-add-hooks security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4673: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-22874: Callin…
first Jul 3, 2025 -
Medium max 7.5ALAS2023-2025-1078 2 CVEs
Moderate: runc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4673: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-22874: Callin…
first Jul 3, 2025 -
Medium max 7.5ALAS2023-2025-1077 2 CVEs
Moderate: containerd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4673: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-22874: Callin…
first Jul 3, 2025 -
Medium max 7.5ALAS2023-2025-1076 2 CVEs
Moderate: soci-snapshotter security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4673: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-22874: Callin…
first Jul 3, 2025 -
Medium max 7.5ALAS2023-2025-1075 2 CVEs
Moderate: nerdctl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4673: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-22874: Callin…
first Jul 3, 2025 -
Medium max 7.5ALAS2023-2025-1074 2 CVEs
Moderate: docker security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4673: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-22874: Callin…
first Jul 3, 2025 -
Medium max 7.5ALAS2023-2025-1073 2 CVEs
Moderate: runfinch-finch security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4673: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-22874: Callin…
first Jul 3, 2025 -
Medium max 5.3ALAS2023-2025-1071 1 CVE
Moderate: mariadb1011 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-30722: Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-…
first Jul 3, 2025 -
Medium max 4.0ALAS2023-2025-1063 1 CVE
Moderate: jackson-core security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-49128: Jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. Starting in version 2.…
first Jul 3, 2025 -
Medium max 7.8ALAS2023-2025-1062 6 CVEs
Moderate: xorg-x11-server-Xwayland security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-49180: A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer o…
first Jul 3, 2025 -
Medium max 7.8ALAS2023-2025-1061 6 CVEs
Moderate: xorg-x11-server security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-49180: A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer o…
first Jul 3, 2025 -
Medium max 7.8ALAS2023-2025-1060 6 CVEs
Moderate: tigervnc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-49180: A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer o…
first Jul 3, 2025 -
Medium max 5.3ALAS2023-2025-1059 1 CVE
Moderate: python-urllib3 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-50181: urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a Pool…
first Jul 3, 2025 -
Medium max 4.3ALAS2023-2025-1056 1 CVE
Moderate: python3.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6069: The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified d…
first Jul 3, 2025 -
Medium max 7.5ALAS2023-2025-1051 1 CVE
Moderate: python-crypto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2018-6594: lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information …
first Jun 27, 2025 -
Medium max 5.3ALAS2023-2025-1049 1 CVE
Moderate: exiv2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-26623: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow was …
first Jun 25, 2025 -
Medium max 5.3ALAS2-2025-2907 1 CVE
Moderate: python-requests security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-47081: Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific malici…
first Jun 18, 2025 -
Medium max 5.3ALAS2-2025-2906 1 CVE
Moderate: python3-requests security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-47081: Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific malici…
first Jun 18, 2025 -
Medium max 7.5ALAS2-2025-2904 3 CVEs
Moderate: amazon-cloudwatch-agent security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-4673: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-22874: Calling V…
first Jun 18, 2025 -
Medium max 6.3ALAS2-2025-2903 4 CVEs
Moderate: qt5-qt3d security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-3158: A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp:…
first Jun 18, 2025 -
Medium max 5.9ALAS2-2025-2902 1 CVE
Moderate: postgresql security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-4207: Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-b…
first Jun 18, 2025 -
Medium max 6.8ALAS2-2025-2900 1 CVE
Moderate: golang security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-4673: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
first Jun 18, 2025 -
Medium max 4.0ALAS2-2025-2898 1 CVE
Moderate: aws-kinesis-agent security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-49128: Jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. Starting in version 2.0.0…
first Jun 18, 2025 -
Medium max 7.0ALAS2-2025-2895 1 CVE
Moderate: libblockdev security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-6019: LPE from allow_active to root in libblockdev via udisks
first Jun 18, 2025 -
Medium max 7.0ALAS2-2025-2894 1 CVE
Moderate: udisks2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-6019: LPE from allow_active to root in libblockdev via udisks
first Jun 18, 2025 -
Medium max 7.8ALAS2-2025-2892 5 CVEs
Moderate: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-53109: In the Linux kernel, the following vulnerability has been resolved: net: tunnels: annotate lockless accesses to dev->needed_headroom CVE-2023-53101: In th…
first Jun 12, 2025 -
Medium max 5.9ALAS2023-2025-1043 1 CVE
Moderate: curl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-9681: When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherw…
first Jun 18, 2025 -
Medium max 5.9ALAS2023-2025-1042 1 CVE
Moderate: abseil-cpp security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-0838: There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} …
first Jun 18, 2025 -
Medium max 9.1ALAS2023-2025-1036 1 CVE
Moderate: perl-YAML-LibYAML security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-40908: YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified
first Jun 18, 2025 -
Medium max 5.9ALAS2023-2025-1033 1 CVE
Moderate: python3.9 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4516: There is an issue in CPython when using `bytes.decode("unicode_escape", error="ignore|replace")`. If you are not using the "unicode_escape" encoding or …
first Jun 18, 2025 -
Medium max 5.9ALAS2023-2025-1032 1 CVE
Moderate: python3.11 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4516: There is an issue in CPython when using `bytes.decode("unicode_escape", error="ignore|replace")`. If you are not using the "unicode_escape" encoding or …
first Jun 18, 2025 -
Medium max 7.3ALAS2023-2025-1031 1 CVE
Moderate: tomcat10 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-46701: Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply…
first Jun 18, 2025 -
Medium max 7.3ALAS2023-2025-1030 1 CVE
Moderate: tomcat9 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-46701: Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply…
first Jun 18, 2025 -
Medium max 7.5ALAS2023-2025-1029 3 CVEs
Moderate: amazon-cloudwatch-agent security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4673: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-22874: Callin…
first Jun 18, 2025 -
Medium max 7.5ALAS2023-2025-1028 2 CVEs
Moderate: golang security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4673: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-22874: Callin…
first Jun 18, 2025 -
Medium max 4.0ALAS2023-2025-1024 1 CVE
Moderate: aws-kinesis-agent security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-49128: Jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. Starting in version 2.…
first Jun 18, 2025