2,033 results · Clear filters · Feed
-
MediumALAS2-2023-2048 2 CVEs
Moderate: libwebp security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-25014: A flaw was found in libwebp. An unitialized variable is used in function ReadSymbol. The highest threat from this vulnerability is to data confidentiality…
first May 11, 2023 -
MediumALAS2-2020-1543 3 CVEs
Moderate: qt5-qtbase security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-24742: An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory, allowing attackers to execut…
first Oct 22, 2020 -
Medium max 5.5ALAS2023-2023-271 1 CVE
Moderate: libtiff security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-26965: loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.
first Jul 19, 2023 -
Medium max 7.5ALAS2023-2023-270 3 CVEs
Moderate: curl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-28322: When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POS…
first Jul 19, 2023 -
Medium max 9.8ALAS2023-2023-268 1 CVE
Moderate: scipy security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-29824: A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0.
first Jul 19, 2023 -
Medium max 5.9ALAS2023-2023-267 1 CVE
Moderate: libtiff security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-3316: A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev…
first Jul 19, 2023 -
Medium max 5.5ALAS2023-2023-266 1 CVE
Moderate: janino security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-33546: janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the parser …
first Jul 19, 2023 -
Medium max 5.5ALAS2023-2023-265 1 CVE
Moderate: libtiff security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-3576: Memory leak in memory leak in tiffcrop.c.
first Jul 19, 2023 -
Medium max 7.5ALAS2-2023-2162 1 CVE
Moderate: SDL2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-4743: A memory leak issue was discovered in SDL2 version >= SDL2-2.0.8.
first Jul 20, 2023 -
Medium max 5.5ALAS2-2023-2161 1 CVE
Moderate: avahi security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-1981: avahi-daemon denial of service can be caused by unprivileged users via DBus
first Jul 20, 2023 -
Medium max 9.8ALAS2-2023-2160 1 CVE
Moderate: scipy security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-29824: A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0.
first Jul 20, 2023 -
MediumALAS2-2023-2159 1 CVE
Moderate: qt5-qtbase security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-32763: In QT, there is an integer overflow in qfixed_p.h when rendering SVG image on the minimal plugin.
first Jul 20, 2023 -
Medium max 5.5ALAS2-2023-2158 1 CVE
Moderate: libtiff security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-3576: Memory leak in memory leak in tiffcrop.c.
first Jul 20, 2023 -
Medium max 5.5ALAS2-2023-2157 1 CVE
Moderate: compat-libtiff3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-3576: Memory leak in memory leak in tiffcrop.c.
first Jul 20, 2023 -
MediumALAS2-2023-2174 1 CVE
Moderate: python-ipaddress security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-14422: A vulnerability was found in the way the ipaddress python module computes hash values in the IPv4Interface and IPv6Interface classes. This flaw allows an …
first Jul 20, 2023 -
MediumALAS2-2023-2172 1 CVE
Moderate: libicu60 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-21913: International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the fi…
first Jul 20, 2023 -
MediumALAS2-2023-2171 1 CVE
Moderate: icu security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-21913: International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the fi…
first Jul 20, 2023 -
MediumALAS2-2023-2168 1 CVE
Moderate: keepalived security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-44225: A flaw was found in keepalived, where an improper authentication vulnerability allows an unprivileged user to change properties that could lead to an acce…
first Jul 20, 2023 -
Medium max 8.8ALAS2-2023-2167 1 CVE
Moderate: bluez security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-0204: A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causin…
first Jul 20, 2023 -
Medium max 4.3ALAS2-2023-2166 1 CVE
Moderate: samba security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-32742: A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allow…
first Jul 20, 2023 -
Medium max 7.5ALAS2-2023-2164 1 CVE
Moderate: python-mako security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-40023: Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and …
first Jul 20, 2023 -
Medium max 5.9ALAS2023-2023-256 3 CVEs
Moderate: java-1.8.0-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-22049: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Libraries). Suppor…
first Jul 17, 2023 -
Medium max 5.9ALAS2023-2023-245 1 CVE
Moderate: python-setuptools security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom…
first Jul 5, 2023 -
Medium max 7.5ALAS2023-2023-244 1 CVE
Moderate: zstd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-4899: In zstd, supplying an empty string as an argument to either --output-dir-flat or --output-dir-mirror may cause a buffer overrun.
first Jul 5, 2023 -
Medium max 8.6ALAS2023-2023-243 2 CVEs
Moderate: nodejs security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-23918: It is possible to bypass Permissions and access non authorized modules by using process.mainModule.require(). This only affects users who had enabled t…
first Jul 5, 2023 -
Medium max 6.1ALAS2023-2023-239 1 CVE
Moderate: python-tornado security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-28370: Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site …
first Jul 5, 2023 -
Medium max 6.1ALAS2023-2023-236 1 CVE
Moderate: python-requests security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-32681: A flaw was found in the Python-requests package, where it is vulnerable to potentially leaking Proxy-Authorization headers to destination servers, spec…
first Jul 5, 2023 -
Medium max 5.3ALAS2023-2023-235 1 CVE
Moderate: cups security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-34241: A vulnerability was found in CUPS. This issue occurs due to logging data of free memory to the logging service AFTER the connection has been closed, wh…
first Jul 5, 2023 -
Medium max 5.9ALAS2023-2023-263 1 CVE
Moderate: yajl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-24795: yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer overflow which…
first Jul 17, 2023 -
Medium max 7.5ALAS2023-2023-261 1 CVE
Moderate: python-wheel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-40898: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker con…
first Jul 17, 2023 -
Medium max 7.5ALAS2023-2023-258 8 CVEs
Moderate: java-17-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-25193: hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back f…
first Jul 17, 2023 -
Medium max 7.5ALAS2023-2023-257 7 CVEs
Moderate: java-11-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-25193: hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back f…
first Jul 17, 2023 -
MediumALAS2023-2023-253 1 CVE
Moderate: libtiff security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-26966: libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big…
first Jul 17, 2023 -
MediumALAS2023-2023-250 1 CVE
Moderate: libX11 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-3138: A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for…
first Jul 17, 2023 -
Medium max 6.2ALAS2023-2023-249 1 CVE
Moderate: ImageMagick security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-3428: The upstream bug report describes this issue as follows: "A vulnerability was found in ImageMagick <=7.1.1, where heap-based buffer overflow was found i…
first Jul 17, 2023 -
Medium max 7.5ALAS2-2023-2137 7 CVEs
Moderate: java-11-amazon-corretto security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-25193: hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for …
first Jul 17, 2023 -
Medium max 7.5ALAS2-2023-2138 8 CVEs
Moderate: java-17-amazon-corretto security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-25193: hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for …
first Jul 17, 2023 -
Medium max 7.5ALAS2-2023-2117 1 CVE
Moderate: python3-pygments security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-27291: In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have…
first Jul 5, 2023 -
MediumALAS2-2023-2116 2 CVEs
Moderate: fribidi security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-25310: A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This fla…
first Jul 5, 2023 -
MediumALAS2-2023-2115 1 CVE
Moderate: pidgin security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-26491: An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server. The…
first Jul 5, 2023