2,033 results · Clear filters · Feed
-
Medium max 8.7ALAS2023-2024-788 3 CVEs
Moderate: python3.11 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-8088: There is a severity vulnerability affecting the CPython "zipfile" module. When iterating over names of entries in a zip archive (for example, methods of…
first Dec 5, 2024 -
Medium max 7.5ALAS2023-2024-785 2 CVEs
Moderate: dovecot security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-23185: Dovecot reports: A DoS is possible with a large number of address headers or abnormally large email headers. CVE-2024-23184: Dovecot reports: A DoS is …
first Dec 5, 2024 -
Medium max 7.5ALAS2023-2024-783 1 CVE
Moderate: libxml2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-34459: An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result i…
first Dec 5, 2024 -
Medium max 5.6ALAS2023-2024-782 1 CVE
Moderate: python-requests security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-35195: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to dis…
first Dec 5, 2024 -
Medium max 5.6ALAS2023-2024-781 1 CVE
Moderate: python-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-35195: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to dis…
first Dec 5, 2024 -
Medium max 5.6ALAS2023-2024-780 1 CVE
Moderate: python3.11-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-35195: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to dis…
first Dec 5, 2024 -
Medium max 9.4ALAS2023-2024-778 2 CVEs
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-49996: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix buffer overflow when parsing NFS reparse points CVE-2024-41080: In the Li…
first Dec 5, 2024 -
Medium max 5.3ALAS2023-2024-771 2 CVEs
Moderate: avahi security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-52616: avahi: Avahi Wide-Area DNS Predictable Transaction IDs CVE-2024-52615: avahi: Avahi Wide-Area DNS Uses Constant Source Port
first Dec 5, 2024 -
Medium max 6.3ALAS2023-2024-769 1 CVE
Moderate: grpc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-7246: It's possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table between the proxy and the backend such that other clients se…
first Dec 5, 2024 -
Medium max 9.8ALAS2023-2024-765 5 CVEs
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-47685: syzbot reported that nf_reject_ip6_tcphdr_put() was possibly sending garbage on the four reserved tcp bits (th->res1) Use skb_put_zero() to clear the w…
first Nov 13, 2024 -
Medium max 7.8ALAS2023-2024-709 13 CVEs
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-44944: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID CVE-2024-44934: In…
first Aug 28, 2024 -
Medium max 7.8ALAS2-2024-2698 8 CVEs
Moderate: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-41097: In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: fix endpoint checking in cxacru_bind() CVE-2024-41059: In the Linux …
first Nov 8, 2024 -
MediumALAS2-2024-2633 2 CVEs
Moderate: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-35807: In the Linux kernel, the following vulnerability has been resolved: ext4: fix corruption during on-line resize CVE-2024-26687: In the Linux kernel, the fo…
first Sep 12, 2024 -
Medium max 7.1ALAS2-2023-2359 5 CVEs
Moderate: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-52868: In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow CVE-2023-52867: In the Linux kernel, …
first Nov 29, 2023 -
Medium max 5.5ALAS2-2024-2701 1 CVE
Moderate: cloud-init security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-1786: Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly e…
first Nov 8, 2024 -
Medium max 7.5ALAS2-2024-2700 1 CVE
Moderate: fop security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-28168: Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. U…
first Nov 8, 2024 -
Medium max 6.2ALAS2-2024-2699 1 CVE
Moderate: python3-idna security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-3651: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode()
first Nov 8, 2024 -
Medium max 7.5ALAS2-2024-2695 1 CVE
Moderate: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-46763: In the Linux kernel, the following vulnerability has been resolved: fou: Fix null-ptr-deref in GRO.
first Nov 8, 2024 -
Medium max 6.5ALAS2023-2024-768 4 CVEs
Moderate: nodejs20 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-36137: A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. Node.js Pe…
first Nov 13, 2024 -
Medium max 6.7ALAS2023-2024-767 1 CVE
Moderate: python-pillow security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-28219: In _imagingcms.c, two strcpy calls were able to copy too much data into fixed length strings. This has been fixed by using strncpy instead.
first Nov 13, 2024 -
Medium max 6.5ALAS2023-2024-766 1 CVE
Moderate: nodejs security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-28863: node-tar is a Tar for Node.js. node-tar prior to version 6.2.1 has no limit on the number of sub-folders created in the folder creation process. An att…
first Nov 13, 2024 -
Medium max 6.2ALAS2023-2024-764 1 CVE
Moderate: python-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-3651: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode()
first Nov 13, 2024 -
Medium max 6.2ALAS2023-2024-763 1 CVE
Moderate: python-idna security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-3651: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode()
first Nov 13, 2024 -
Medium max 6.2ALAS2023-2024-762 1 CVE
Moderate: python3.11-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-3651: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode()
first Nov 13, 2024 -
Medium max 4.5ALAS2023-2024-761 4 CVEs
Moderate: vim security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-47814: Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (visible in a window) a BufWinLeav…
first Nov 13, 2024 -
Medium max 8.6ALAS2023-2024-723 3 CVEs
Moderate: cups-filters security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-47850: CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a …
first Oct 10, 2024 -
MediumALAS2-2024-2689 1 CVE
Moderate: zziplib security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-18770: An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.
first Oct 24, 2024 -
Medium max 6.5ALAS2-2024-2688 1 CVE
Moderate: libdwarf security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-27545: A flaw was found in libdwarf. A possible memory leak allows an attacker to input a specially crafted file, leading to a crash. The highest threat from thi…
first Oct 24, 2024 -
Medium max 5.3ALAS2-2024-2687 1 CVE
Moderate: python3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-27043: The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is …
first Oct 24, 2024 -
Medium max 5.3ALAS2-2024-2686 1 CVE
Moderate: python security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-27043: The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is …
first Oct 24, 2024 -
Medium max 4.8ALAS2-2024-2684 4 CVEs
Moderate: java-11-amazon-corretto security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-21235: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported v…
first Oct 24, 2024 -
Medium max 4.8ALAS2-2024-2683 4 CVEs
Moderate: java-17-amazon-corretto security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-21235: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported v…
first Oct 24, 2024 -
Medium max 6.2ALAS2-2024-2680 1 CVE
Moderate: python-idna security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-3651: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode()
first Oct 24, 2024 -
Medium max 6.2ALAS2-2024-2679 1 CVE
Moderate: python-pip security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-3651: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode()
first Oct 24, 2024 -
MediumALAS2-2024-2658 2 CVEs
Moderate: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-44944: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID CVE-2024-43871: In th…
first Oct 24, 2024 -
Medium max 4.4ALAS2-2024-2657 1 CVE
Moderate: pcp security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-45770: A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. Th…
first Oct 24, 2024 -
Medium max 7.5ALAS2-2024-2656 2 CVEs
Moderate: cups-filters security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-47850: CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a pri…
first Oct 24, 2024 -
Medium max 4.8ALAS2023-2024-754 4 CVEs
Moderate: java-1.8.0-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-21235: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supporte…
first Oct 24, 2024 -
Medium max 4.8ALAS2023-2024-753 4 CVEs
Moderate: java-11-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-21235: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supporte…
first Oct 24, 2024 -
Medium max 4.8ALAS2023-2024-752 4 CVEs
Moderate: java-17-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-21235: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supporte…
first Oct 24, 2024