2,033 results · Clear filters · Feed
-
Medium max 4.2ALAS2023-2023-437 1 CVE
Moderate: amazon-efs-utils security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-46174: efs-utils is a set of Utilities for Amazon Elastic File System (EFS). A potential race condition issue exists within the Amazon EFS mount helper in efs…
first Nov 9, 2023 -
MediumALAS2023-2023-438 1 CVE
Moderate: re2c security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-23901: A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/dead_rules.cc.
first Nov 9, 2023 -
Medium max 7.8ALAS2023-2023-425 1 CVE
Moderate: binutils security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-1579: A potential illegal memory access in binutils has been found when parsing a corrupt file.
first Oct 30, 2023 -
Medium max 6.6ALAS2023-2023-417 3 CVEs
Moderate: opensc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys This issue require physical access to the computer running opensc and crafte…
first Oct 30, 2023 -
MediumALAS2023-2023-413 1 CVE
Moderate: libvpx security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-44488: VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.
first Oct 30, 2023 -
Medium max 8.8ALAS2023-2023-410 1 CVE
Moderate: zlib security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-45853: MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, o…
first Oct 30, 2023 -
Medium max 5.3ALAS2023-2023-405 1 CVE
Moderate: wireshark security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-5371: RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file
first Oct 30, 2023 -
Medium max 6.7ALAS2-2023-2332 7 CVEs
Moderate: libguestfs-winsupport security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-30789: A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22. CVE-2022-30788: A crafted NTFS im…
first Oct 30, 2023 -
Medium max 5.5ALAS2-2023-2331 1 CVE
Moderate: nautilus security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-37290: GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive.
first Oct 30, 2023 -
Medium max 6.6ALAS2-2023-2323 2 CVEs
Moderate: opensc security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-40661: multiple memory issues with pkcs15-init (enrollment tool) CVE-2023-40660: Potential PIN bypass. When the token/card was plugged into the computer and auth…
first Oct 30, 2023 -
Medium max 8.8ALAS2-2023-2320 1 CVE
Moderate: zlib security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-45853: MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or e…
first Oct 30, 2023 -
Medium max 6.5ALAS2-2020-1471 2 CVEs
Moderate: python security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-48560: A use-after-free exists in Python through 3.9 via heappushpop in heapq. CVE-2020-8492: Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3…
first Jul 31, 2020 -
Medium max 5.3ALAS2023-2023-401 1 CVE
Moderate: java-11-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-22081: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracl…
first Oct 18, 2023 -
Medium max 5.3ALAS2023-2023-400 2 CVEs
Moderate: java-17-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-22081: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracl…
first Oct 18, 2023 -
Medium max 5.3ALAS2023-2023-399 2 CVEs
Moderate: java-21-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-22081: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracl…
first Oct 18, 2023 -
Medium max 5.3ALAS2023-2023-398 2 CVEs
Moderate: java-1.8.0-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-22081: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracl…
first Oct 18, 2023 -
MediumALAS2023-2023-386 1 CVE
Moderate: giflib security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-39742: giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.
first Oct 12, 2023 -
Medium max 6.4ALAS2023-2023-384 1 CVE
Moderate: composer security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-43655: Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as…
first Oct 12, 2023 -
Medium max 7.8ALAS2023-2023-383 3 CVEs
Moderate: libX11 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-43787: libX11: integer overflow in XCreateImage() leading to a heap overflow. CVE-2023-43786: A vulnerability was found in libX11 due to an infinite loop with…
first Oct 12, 2023 -
Medium max 7.8ALAS2023-2023-382 3 CVEs
Moderate: libXpm security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-43789: libXpm: out of bounds read on XPM with corrupted colormap CVE-2023-43787: libX11: integer overflow in XCreateImage() leading to a heap overflow. CVE-20…
first Oct 12, 2023 -
Medium max 5.5ALAS2023-2023-381 1 CVE
Moderate: libXpm security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-43788: libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() NOTE: https://www.openwall.com/lists/oss-security/2023/10/03/1 NOTE: Fixed by: https://gitl…
first Oct 12, 2023 -
Medium max 4.0ALAS2023-2023-378 1 CVE
Moderate: vim security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-5344: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.
first Oct 12, 2023 -
Medium max 5.3ALAS2-2023-2315 1 CVE
Moderate: java-11-amazon-corretto security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-22081: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle J…
first Oct 18, 2023 -
Medium max 5.3ALAS2-2023-2314 2 CVEs
Moderate: java-17-amazon-corretto security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-22081: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle J…
first Oct 18, 2023 -
MediumALAS2-2023-2310 2 CVEs
Moderate: squid security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-19132: A memory leak was discovered in the way Squid handles SNMP denied queries. A remote attacker may use this flaw to exhaust the resources on the server mach…
first Oct 12, 2023 -
Medium max 8.8ALAS2-2023-2309 2 CVEs
Moderate: bluez security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-8922: A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there is enough space in the destination …
first Oct 12, 2023 -
MediumALAS2-2023-2308 2 CVEs
Moderate: ghostscript security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-21710: A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of servic…
first Oct 12, 2023 -
MediumALAS2-2023-2307 4 CVEs
Moderate: libsepol security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-36087: The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because …
first Oct 12, 2023 -
MediumALAS2-2023-2306 1 CVE
Moderate: grilo security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-39365: In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving users vulnerab…
first Oct 12, 2023 -
Medium max 4.3ALAS2-2023-2305 1 CVE
Moderate: jbigkit security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-1210: A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicio…
first Oct 12, 2023 -
MediumALAS2-2023-2304 1 CVE
Moderate: pki-core security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-2393: A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This …
first Oct 12, 2023 -
MediumALAS2-2023-2301 2 CVEs
Moderate: sudo security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-28487: Sudo before 1.9.13 does not escape control characters in sudoreplay output. CVE-2023-28486: Sudo before 1.9.13 does not escape control characters in log m…
first Oct 12, 2023 -
Medium max 6.1ALAS2-2023-2300 3 CVEs
Moderate: libtiff security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-3164: A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows at…
first Oct 12, 2023 -
MediumALAS2-2023-2299 1 CVE
Moderate: libreswan security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-38712: A NULL pointer dereference vulnerability was found in the Libreswan package. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notif…
first Oct 12, 2023 -
Medium max 6.5ALAS2-2023-2297 1 CVE
Moderate: ceph-common security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-43040: A flaw was found in rgw. This flaw allows an unprivileged user to write to any bucket(s) accessible by a given key if a POST's form-data contains a key ca…
first Oct 12, 2023 -
Medium max 7.8ALAS2-2023-2296 2 CVEs
Moderate: libX11 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-43787: libX11: integer overflow in XCreateImage() leading to a heap overflow. CVE-2023-43785: libX11: out-of-bounds memory access in _XkbReadKeySyms()
first Oct 12, 2023 -
Medium max 7.8ALAS2-2023-2295 3 CVEs
Moderate: libXpm security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-43789: libXpm: out of bounds read on XPM with corrupted colormap CVE-2023-43788: libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() NOTE: https://www.op…
first Oct 12, 2023 -
MediumALAS2-2023-2294 1 CVE
Moderate: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-44488: VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.
first Oct 12, 2023 -
Medium max 7.0ALAS2-2023-2293 1 CVE
Moderate: cups security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-4504: A vulnerability was found in OpenPrinting CUPS. The security flaw occurs due to failure in validating the length provided by an attacker-crafted CUPS docum…
first Oct 12, 2023 -
Medium max 6.2ALAS2-2023-2289 1 CVE
Moderate: ImageMagick security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-5341: A vulnerability was found in ImageMagick where heap use-after-free was found in coders/bmp.c.
first Oct 12, 2023