2,033 results · Clear filters · Feed
-
MediumALAS2-2019-1185 22 CVEs
Moderate: binutils security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-7643: The display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (integer overflow and application cr…
first Mar 21, 2019 -
MediumALAS2-2018-1100 3 CVEs
Moderate: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-7755: An issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux kernel. The floppy driver will copy a kernel pointer to user…
first Nov 7, 2018 -
MediumALAS2-2018-1046 2 CVEs
Moderate: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-9516: A flaw was found in the Linux kernel in the hid_debug_events_read() function in the drivers/hid/hid-debug.c file. A lack of the certain checks may allow a …
first Jul 23, 2018 -
Medium max 5.3ALAS2-2025-2817 1 CVE
Moderate: python3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-9287: A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly,…
-
Medium max 4.9ALAS2023-2024-698 2 CVEs
Moderate: mariadb105 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-21096: Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.36 and prior and…
first Aug 1, 2024 -
Medium max 9.8ALAS2-2025-2815 2 CVEs
Moderate: python3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-0938: The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid accordin…
first Mar 26, 2025 -
Medium max 9.8ALAS2-2025-2816 2 CVEs
Moderate: python security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-40217: An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects servers (such …
first Mar 26, 2025 -
Medium max 9.8ALAS2-2025-2814 1 CVE
Moderate: python-pip security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2007-4559: Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to …
first Mar 26, 2025 -
Medium max 7.5ALAS2-2025-2813 1 CVE
Moderate: jsoup security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-37714: jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks.…
first Mar 26, 2025 -
Medium max 7.5ALAS2-2025-2810 1 CVE
Moderate: iptraf-ng security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-52949: iptraf-ng 1.2.1 has a stack-based buffer overflow.
first Mar 26, 2025 -
Medium max 5.1ALAS2-2025-2809 1 CVE
Moderate: iniparser security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-0633: Heap-based Buffer Overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows attacker to read out of bound memory
first Mar 26, 2025 -
Medium max 9.8ALAS2023-2025-924 1 CVE
Moderate: python3.11-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2007-4559: Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers …
first Mar 26, 2025 -
Medium max 9.8ALAS2023-2025-923 1 CVE
Moderate: python-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2007-4559: Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers …
first Mar 26, 2025 -
Medium max 5.9ALAS2023-2025-921 5 CVEs
Moderate: ruby3.2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-43398: REXML is an XML toolkit for Ruby. The REXML gem before 3.3.6 has a DoS vulnerability when it parses an XML that has many deep elements that have same l…
first Mar 26, 2025 -
Medium max 4.6ALAS2023-2025-920 1 CVE
Moderate: containerd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-40635: containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched wit…
first Mar 26, 2025 -
Medium max 6.3ALAS2023-2025-918 1 CVE
Moderate: ansible-core security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-9902: A flaw was found in Ansible. The ansible-core `user` module can allow an unprivileged user to silently create or replace the contents of any file on any…
first Mar 26, 2025 -
Medium max 6.3ALAS2023-2025-916 5 CVEs
Moderate: php8.1 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-1861: Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1736: Stream HTTP wrapper header check might omit basic auth header. CVE-2025-1734…
first Mar 26, 2025 -
Medium max 4.4ALAS2023-2025-913 1 CVE
Moderate: golang security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22870: NOTE: https://groups.google.com/g/golang-announce/c/4t3lzH3I0eI/m/b42ImqrBAQAJ NOTE: https://github.com/golang/go/issues/71984 NOTE: Fixed by: https://…
first Mar 26, 2025 -
MediumALAS2023-2025-905 1 CVE
Moderate: libxslt security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-40403: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.…
first Mar 13, 2025 -
Medium max 4.8ALAS2023-2025-904 4 CVEs
Moderate: java-23-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-21235: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supporte…
first Mar 13, 2025 -
Medium max 8.3ALAS2023-2025-903 1 CVE
Moderate: python-twisted security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-41671: Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could proces…
first Mar 13, 2025 -
Medium max 5.3ALAS2023-2025-902 1 CVE
Moderate: libsndfile security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-50612: libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.
first Mar 13, 2025 -
Medium max 6.3ALAS2023-2025-900 2 CVEs
Moderate: python3.9 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-9287: A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted proper…
first Mar 13, 2025 -
Medium max 6.3ALAS2023-2025-899 1 CVE
Moderate: python3.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-0938: The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid accor…
first Mar 13, 2025 -
Medium max 6.3ALAS2023-2025-898 1 CVE
Moderate: python3.9 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-0938: The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid accor…
first Mar 13, 2025 -
Medium max 6.5ALAS2-2025-2803 1 CVE
Moderate: python-pillow security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2016-2533: Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote att…
first Mar 13, 2025 -
MediumALAS2-2025-2802 1 CVE
Moderate: perl-App-cpanminus security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-16154: The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.
first Mar 13, 2025 -
Medium max 7.1ALAS2-2025-2801 2 CVEs
Moderate: batik security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-44730: Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.1…
first Mar 13, 2025 -
Medium max 7.5ALAS2-2025-2798 4 CVEs
Moderate: 389-ds-base security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-8445: The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product versions, an authenticated user may cause a server cra…
first Mar 13, 2025 -
Medium max 7.5ALAS2-2025-2797 5 CVEs
Moderate: python security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-0938: The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid accordin…
first Mar 13, 2025 -
Medium max 6.1ALAS2-2025-2795 3 CVEs
Moderate: golang security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-22870: NOTE: https://groups.google.com/g/golang-announce/c/4t3lzH3I0eI/m/b42ImqrBAQAJ NOTE: https://github.com/golang/go/issues/71984 NOTE: Fixed by: https://git…
first Mar 13, 2025 -
Medium max 6.3ALAS2023-2025-871 3 CVEs
Moderate: python3.11 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-1795: During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also…
first Feb 26, 2025 -
Medium max 9.8ALAS2023-2025-829 4 CVEs
Moderate: python3.11 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-7592: There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module. When parsing cookies that contained ba…
first Jan 30, 2025 -
Medium max 9.8ALAS2023-2025-855 7 CVEs
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-21692: In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing CVE-2025-21690: In the Linux kernel, the fol…
first Feb 12, 2025 -
Medium max 9.8ALAS2-2024-2549 55 CVEs
Moderate: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-50017: In the Linux kernel, the following vulnerability has been resolved: x86/mm/ident_map: Use gbpages only where full GB page should be mapped. CVE-2024-35835…
first May 23, 2024 -
Medium max 6.5ALAS2-2023-2195 2 CVEs
Moderate: microcode_ctl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-23908: Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosu…
first Aug 3, 2023 -
Medium max 6.5ALAS2-2025-2787 3 CVEs
Moderate: microcode_ctl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-39279: Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user to potentially enable denial of ser…
first Feb 26, 2025 -
Medium max 6.5ALAS2-2025-2784 1 CVE
Moderate: python-pillow security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2016-0740: Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a cr…
first Feb 26, 2025 -
Medium max 9.8ALAS2-2025-2782 1 CVE
Moderate: libglvnd security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-45924: libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen(). NOTE: this is disput…
first Feb 26, 2025 -
Medium max 4.6ALAS2-2025-2781 1 CVE
Moderate: openssl11 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-13176: Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A…
first Feb 26, 2025