2,033 results · Clear filters · Feed
-
Medium max 7.5ALAS2023-2023-116 2 CVEs
Moderate: python3.9 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-24329: An issue in the urllib.parse component of Python before v3.11 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank…
first Mar 6, 2023 -
Medium max 9.1ALAS2-2023-1986 3 CVEs
Moderate: curl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-23916: curl: HTTP multi-header compression denial of service CVE-2023-23915: A flaw was found in the Curl package, where the HSTS mechanism could fail when multi…
first Mar 2, 2023 -
Medium max 6.2ALAS2-2023-1984 2 CVEs
Moderate: git security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-23946: Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, …
first Mar 2, 2023 -
Medium max 5.9ALAS2-2023-1979 1 CVE
Moderate: python2-setuptools security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom Pa…
first Mar 2, 2023 -
Medium max 7.5ALAS2-2023-1974 1 CVE
Moderate: openssl11 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-2097: AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimized implementation will not encrypt the entirety of the data under some circumstances…
first Mar 2, 2023 -
Medium max 7.5ALAS2-2023-1973 1 CVE
Moderate: protobuf security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-1941: A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.21.5 fo…
first Mar 2, 2023 -
Medium max 7.8ALAS2-2023-1972 1 CVE
Moderate: cpio security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-38185: GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that trigg…
first Mar 2, 2023 -
MediumALAS2-2023-1971 7 CVEs
Moderate: ImageMagick security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-32547: In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte alignme…
first Mar 2, 2023 -
Medium max 7.5ALAS2-2023-1970 3 CVEs
Moderate: freeradius security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-41861: freeradius: A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash. CVE-2022-41860: When an E…
first Mar 2, 2023 -
Medium max 3.5ALAS2-2023-1969 1 CVE
Moderate: libbpf security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-3606: A vulnerability was found in Linux Kernel. It has been classified as problematic. This affects the function find_prog_by_sec_insn of the file tools/lib/bpf…
first Mar 2, 2023 -
MediumALAS2-2023-1968 1 CVE
Moderate: qt5-qtsvg security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-45930: Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (cal…
first Mar 2, 2023 -
MediumALAS2-2023-1967 1 CVE
Moderate: qt5-qtbase security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-38593: Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngin…
first Mar 2, 2023 -
Medium max 7.4ALAS2023-2023-007 2 CVEs
Moderate: xdg-utils security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-4055: When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird t…
first Feb 17, 2023 -
MediumALAS2023-2023-004 2 CVEs
Moderate: autotrace security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2019-19005: A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitmap image. This may occur after t…
first Feb 17, 2023 -
Medium max 6.8ALAS2023-2023-010 2 CVEs
Moderate: bind security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-0396: A flaw was found in Bind that incorrectly handles certain crafted TCP streams. The vulnerability allows TCP connection slots to be consumed for an indef…
first Feb 17, 2023 -
Medium max 6.5ALAS2023-2023-009 1 CVE
Moderate: protobuf security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-22570: A flaw was found in protobuf. The vulnerability occurs due to incorrect parsing of a NULL character in the proto symbol and leads to a Null pointer der…
first Feb 17, 2023 -
MediumALAS2023-2023-008 1 CVE
Moderate: flac security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-0561: An out-of-bounds write vulnerability was found in libFlak. The vulnerability occurs due to a missing bounds check. This flaw allows a local attacker wit…
first Feb 17, 2023 -
Medium max 7.5ALAS2023-2023-014 1 CVE
Moderate: jdom security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-33813: An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.
first Feb 17, 2023 -
MediumALAS2023-2023-017 4 CVEs
Moderate: libsepol security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-36087: The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs becau…
first Feb 17, 2023 -
MediumALAS2023-2023-015 1 CVE
Moderate: lz4 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-3520: There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to c…
first Feb 17, 2023 -
MediumALAS2023-2023-028 1 CVE
Moderate: libsndfile security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-4156: An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking …
first Feb 17, 2023 -
MediumALAS2023-2023-030 1 CVE
Moderate: gcc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-42574: A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rende…
first Feb 17, 2023 -
Medium max 5.5ALAS2023-2023-025 3 CVEs
Moderate: systemd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-45873: systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parse_elf…
first Feb 17, 2023 -
MediumALAS2023-2023-035 1 CVE
Moderate: zsh security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-45444: A vulnerability was found in zsh in the parsecolorchar() function of prompt.c file. This flaw allows an attacker to perform code execution if they cont…
first Feb 17, 2023 -
Medium max 5.5ALAS2023-2023-024 3 CVEs
Moderate: util-linux security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-0563: A flaw was found in the Linux kernel's util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an INPUTRC envi…
first Feb 17, 2023 -
Medium max 7.1ALAS2023-2023-023 2 CVEs
Moderate: ncurses security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-29458: A segmentation fault vulnerability was found in ncurses's convert_strings() function of tinfo/read_entry.c file. This flaw occurs due to corrupted term…
first Feb 17, 2023 -
Medium max 7.8ALAS2023-2023-021 1 CVE
Moderate: cpio security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-38185: GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that tr…
first Feb 17, 2023 -
MediumALAS2023-2023-019 1 CVE
Moderate: vsftpd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-3618: ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certifica…
first Feb 17, 2023 -
MediumALAS2023-2023-036 1 CVE
Moderate: harfbuzz security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-45931: HarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t::set (called from hb_sparseset_t<hb_bit_set_invertible_t>::set and hb_set_copy).
first Feb 17, 2023 -
Medium max 7.5ALAS2023-2023-038 22 CVEs
Moderate: wireshark security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-3725: Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file CVE-2022-3190: In…
first Feb 17, 2023 -
MediumALAS2023-2023-018 1 CVE
Moderate: sendmail security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-3618: ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certifica…
first Feb 17, 2023 -
Medium max 7.5ALAS2023-2023-039 1 CVE
Moderate: dnsmasq security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-0934: A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmas…
first Feb 17, 2023 -
MediumALAS2023-2023-041 1 CVE
Moderate: libinput security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-1215: A format string vulnerability was found in libinput
first Feb 17, 2023 -
MediumALAS2023-2023-045 2 CVEs
Moderate: pcre2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-1587: An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This …
first Feb 17, 2023 -
Medium max 7.8ALAS2023-2023-044 1 CVE
Moderate: e2fsprogs security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-1304: An out-of-bounds read/write vulnerability was found in e2fsprogs. This issue leads to a segmentation fault and possibly arbitrary code execution via a s…
first Feb 17, 2023 -
Medium max 7.5ALAS2023-2023-054 2 CVEs
Moderate: openssl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-3358: OpenSSL supports creating a custom cipher via the legacy EVP_CIPHER_meth_new() function and associated function calls. This function was deprecated in O…
first Feb 17, 2023 -
MediumALAS2023-2023-053 1 CVE
Moderate: ghostscript security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-2085: A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocatin…
first Feb 17, 2023 -
Medium max 9.8ALAS2023-2023-060 1 CVE
Moderate: glibc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-23219: A stack based buffer-overflow vulnerability was found in the deprecated compatibility function clnt_create() in the sunrpc's clnt_gen.c module of the G…
first Feb 17, 2023 -
MediumALAS2023-2023-069 3 CVEs
Moderate: fribidi security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-25310: A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This …
first Feb 17, 2023 -
Medium max 5.5ALAS2023-2023-067 5 CVEs
Moderate: libtiff security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-2953: LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted t…
first Feb 17, 2023