2,033 results · Clear filters · Feed
-
Medium max 7.0ALAS2023-2025-1021 1 CVE
Moderate: udisks2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6019: LPE from allow_active to root in libblockdev via udisks
first Jun 18, 2025 -
Medium max 7.0ALAS2023-2025-1020 1 CVE
Moderate: libblockdev security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6019: LPE from allow_active to root in libblockdev via udisks
first Jun 18, 2025 -
Medium max 7.8ALAS2023-2025-1018 6 CVEs
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22062: In the Linux kernel, the following vulnerability has been resolved: sctp: add mutual exclusion in proc_sctp_do_udp_port() CVE-2024-46751: In the Linux …
first Jun 12, 2025 -
Medium max 9.8ALAS2023-2023-160 10 CVEs
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-53093: In the Linux kernel, the following vulnerability has been resolved: tracing: Do not let histogram values have some modifiers CVE-2023-53083: In the Lin…
first Apr 13, 2023 -
Medium max 7.5ALAS2-2025-2890 1 CVE
Moderate: qt security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-38197: An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive entity expans…
first Jun 9, 2025 -
Medium max 7.5ALAS2-2025-2889 1 CVE
Moderate: python3-tornado security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-47287: Tornado is a Python web framework and asynchronous networking library. When Tornado's ``multipart/form-data`` parser encounters certain errors, it logs a …
first Jun 9, 2025 -
Medium max 7.5ALAS2-2025-2888 1 CVE
Moderate: python-tornado security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-47287: Tornado is a Python web framework and asynchronous networking library. When Tornado's ``multipart/form-data`` parser encounters certain errors, it logs a …
first Jun 9, 2025 -
Medium max 5.3ALAS2-2025-2886 1 CVE
Moderate: libtasn1 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-12133: When an input DER data contains a large number of SEQUENCE OF or SET OF elements, decoding the data and searching a specific element in it take quadratic …
first Jun 4, 2025 -
Medium max 5.3ALAS2-2025-2885 1 CVE
Moderate: gnutls security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-12243: A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded …
first Jun 4, 2025 -
Medium max 7.5ALAS2-2025-2884 1 CVE
Moderate: git security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-52005: Git is a source code management tool. When cloning from a server (or fetching, or pushing), informational or error messages are transported from the remot…
first Jun 4, 2025 -
Medium max 5.3ALAS2-2025-2880 1 CVE
Moderate: perl-FCGI security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-40907: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library. The included FastCGI library is affected …
first Jun 4, 2025 -
Medium max 5.9ALAS2-2025-2879 1 CVE
Moderate: perl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-40909: Thread creation while a directory handle is open does a fchdir, affecting other threads (race condition)
first Jun 4, 2025 -
Medium max 6.0ALAS2-2025-2878 1 CVE
Moderate: screen security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-46802: For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.
first Jun 4, 2025 -
Medium max 4.0ALAS2-2025-2875 1 CVE
Moderate: ghostscript security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-48708: gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document…
first Jun 4, 2025 -
Medium max 4.9ALAS2023-2025-1016 1 CVE
Moderate: mariadb1011 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-52971: MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
first Jun 4, 2025 -
Medium max 4.6ALAS2023-2025-1015 1 CVE
Moderate: ecs-init security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-40635: containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched wit…
first Jun 4, 2025 -
Medium max 7.5ALAS2023-2025-1014 1 CVE
Moderate: git security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-52005: Git is a source code management tool. When cloning from a server (or fetching, or pushing), informational or error messages are transported from the re…
first Jun 4, 2025 -
Medium max 6.5ALAS2023-2025-1011 1 CVE
Moderate: ecs-init security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22872: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tok…
first Jun 4, 2025 -
Medium max 5.9ALAS2023-2025-1007 1 CVE
Moderate: perl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-40909: Thread creation while a directory handle is open does a fchdir, affecting other threads (race condition)
first Jun 4, 2025 -
Medium max 6.0ALAS2023-2025-1006 1 CVE
Moderate: screen security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-46802: For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.
first Jun 4, 2025 -
Medium max 7.5ALAS2023-2025-1002 1 CVE
Moderate: python-tornado security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-47287: Tornado is a Python web framework and asynchronous networking library. When Tornado's ``multipart/form-data`` parser encounters certain errors, it logs…
first Jun 4, 2025 -
Medium max 4.0ALAS2023-2025-1000 1 CVE
Moderate: ghostscript security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-48708: gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF docum…
first Jun 4, 2025 -
MediumALAS2023-2025-993 2 CVEs
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-36975: In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Do not use WARN when encode fails CVE-2024-36967: In the Linux kerne…
first Jun 2, 2025 -
Medium max 5.3ALAS2023-2025-990 3 CVEs
Moderate: mariadb105 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-30722: Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-…
first May 21, 2025 -
Medium max 9.6ALAS2023-2024-643 31 CVEs
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-36959: In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() CVE-2024-36953: In th…
first Jun 19, 2024 -
Medium max 9.8ALAS2023-2024-613 32 CVEs
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-35976: In the Linux kernel, the following vulnerability has been resolved: xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING CVE-2024-35973: In the…
first May 9, 2024 -
Medium max 6.5ALAS2023-2025-991 4 CVEs
Moderate: microcode_ctl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-20103: Potential security vulnerabilities in some Intel(r) Processors may allow denial of service. Intel is releasing microcode updates to mitigate these pote…
first May 23, 2025 -
Medium max 5.3ALAS2023-2025-989 1 CVE
Moderate: libtasn1 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-12133: When an input DER data contains a large number of SEQUENCE OF or SET OF elements, decoding the data and searching a specific element in it take quadrat…
first May 21, 2025 -
Medium max 8.1ALAS2023-2025-988 6 CVEs
Moderate: glibc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-0395: When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string …
first May 21, 2025 -
Medium max 4.6ALAS2023-2025-987 1 CVE
Moderate: docker security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-40635: containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched wit…
first May 21, 2025 -
Medium max 4.3ALAS2023-2025-986 1 CVE
Moderate: apache-commons-io security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-47554: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU…
first May 21, 2025 -
Medium max 8.6ALAS2023-2025-984 7 CVEs
Moderate: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22108: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Mask the bd_cnt field in the TX BD properly CVE-2025-21884: In the Linux k…
first May 21, 2025 -
Medium max 6.1ALAS2023-2025-982 1 CVE
Moderate: open-vm-tools security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22247: VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local …
first May 21, 2025 -
Medium max 3.8ALAS2023-2025-977 1 CVE
Moderate: golang security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22873: A directory traversal vulnerability was discovered in the Go programming language's os package in versions prior to 1.24.3. The vulnerability allows im…
first May 21, 2025 -
Medium max 5.9ALAS2023-2025-975 1 CVE
Moderate: postgresql17 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4207: Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a …
first May 21, 2025 -
Medium max 5.9ALAS2023-2025-974 1 CVE
Moderate: postgresql15 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4207: Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a …
first May 21, 2025 -
Medium max 5.9ALAS2023-2025-973 1 CVE
Moderate: postgresql16 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4207: Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a …
first May 21, 2025 -
Medium max 6.5ALAS2-2025-2872 4 CVEs
Moderate: microcode_ctl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-20103: Potential security vulnerabilities in some Intel(r) Processors may allow denial of service. Intel is releasing microcode updates to mitigate these potenti…
first May 23, 2025 -
Medium max 7.5ALAS2-2025-2871 1 CVE
Moderate: jetty security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-28165: In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
first May 21, 2025 -
Medium max 5.6ALAS2-2025-2868 1 CVE
Moderate: python-requests security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-35195: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disabl…
first May 21, 2025