2,033 results · Clear filters · Feed
-
MediumALAS2-2022-1878 1 CVE
Moderate: util-linux security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-7738: A command injection flaw was found in the way util-linux implements umount autocompletion in Bash. An attacker with the ability to mount a filesystem with …
first Nov 15, 2022 -
Medium max 7.8ALAS2-2022-1884 1 CVE
Moderate: e2fsprogs security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-1304: An out-of-bounds read/write vulnerability was found in e2fsprogs. This issue leads to a segmentation fault and possibly arbitrary code execution via a spec…
first Dec 1, 2022 -
Medium max 7.1ALAS2-2022-1893 2 CVEs
Moderate: ncurses security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-29458: A segmentation fault vulnerability was found in ncurses's convert_strings() function of tinfo/read_entry.c file. This flaw occurs due to corrupted terminf…
first Dec 1, 2022 -
Medium max 4.3ALAS2-2022-1892 6 CVEs
Moderate: mutt security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-1328: A flaw was found in mutt. When reading unencoded messages, mutt uses the line length from the untrusted input without any validation. This flaw allows an a…
first Dec 1, 2022 -
Medium max 5.5ALAS2-2022-1901 1 CVE
Moderate: util-linux security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-0563: A flaw was found in the Linux kernel's util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" envir…
first Dec 1, 2022 -
Medium max 5.5ALAS2-2022-1899 1 CVE
Moderate: systemd security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-3821: An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and acc…
first Dec 1, 2022 -
Medium max 9.8ALAS2-2022-1875 5 CVEs
Moderate: curl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-35252: A vulnerability found in curl. This security flaw happens when curl is used to retrieve and parse cookies from an HTTP(S) server, where it accepts cookies…
first Oct 31, 2022 -
Medium max 6.5ALAS2-2022-1874 2 CVEs
Moderate: dhcp security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-2929: A vulnerability was found in the DHCP server where the "fqdn_universe_decode()" function allocates buffer space for the contents of option 81 (fqdn) data r…
first Oct 31, 2022 -
MediumALAS2-2022-1871 1 CVE
Moderate: pcre2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-1586: An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This…
first Oct 31, 2022 -
MediumALAS2-2022-1869 2 CVEs
Moderate: glibc security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2015-8985: The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure an…
first Oct 31, 2022 -
Medium max 5.3ALAS2-2022-1866 6 CVEs
Moderate: java-17-amazon-corretto security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-39399: Title: Improve HTTP/1.1 client usage The HTTP/2 connection cache caches connection based on the IP address but not the SNI which can allow spoofing for se…
first Oct 17, 2022 -
Medium max 5.3ALAS2-2022-1867 6 CVEs
Moderate: java-11-amazon-corretto security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-39399: Title: Improve HTTP/1.1 client usage The HTTP/2 connection cache caches connection based on the IP address but not the SNI which can allow spoofing for se…
first Oct 17, 2022 -
Medium max 7.8ALAS2-2022-1857 1 CVE
Moderate: glibc security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-3999: A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. …
first Oct 17, 2022 -
MediumALAS2-2022-1848 1 CVE
Moderate: libxml2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-29824: A flaw was found in the libxml2 library in functions used to manipulate the xmlBuf and the xmlBuffer types. A substantial input causes values to calculate…
first Sep 15, 2022 -
Medium max 7.5ALAS2-2022-1845 1 CVE
Moderate: krb5 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-28196: A flaw was found in krb5. MIT Kerberos 5 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support…
first Sep 9, 2022 -
MediumALAS2-2022-1853 1 CVE
Moderate: ruby security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-28739: A buffer overrun vulnerability was found in Ruby. The issue occurs in a conversion algorithm from a String to a Float that causes process termination due …
first Sep 30, 2022 -
Medium max 7.5ALAS2-2022-1851 1 CVE
Moderate: golang security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-27664: In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if …
first Sep 30, 2022 -
Medium max 9.8ALAS2-2022-1849 1 CVE
Moderate: zlib security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-37434: A security vulnerability was found in zlib. The flaw triggered a heap-based buffer in inflate in the inflate.c function via a large gzip header extra fiel…
first Sep 15, 2022 -
Medium max 9.8ALAS2-2022-1844 1 CVE
Moderate: python-bottle security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-31799: Bottle before 0.12.20 mishandles errors during early request binding.
first Sep 1, 2022 -
Medium max 5.5ALAS2-2022-1800 2 CVEs
Moderate: microcode_ctl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-21151: A flaw was found in hw. Processor optimization removal or modification of security-critical code for some Intel(R) processors may potentially allow an aut…
first May 31, 2022 -
Medium max 5.5ALAS2-2022-1833 3 CVEs
Moderate: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-36879: An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice. CVE-…
first Aug 15, 2022 -
MediumALAS2-2022-1834 1 CVE
Moderate: gnupg2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-34903: A vulnerability was found in GnuPG. This issue occurs due to an escape detection loop at the write_status_text_and_buffer() function in g10/cpr.c. This fl…
first Aug 15, 2022 -
Medium max 9.8ALAS2-2022-1832 1 CVE
Moderate: openssl11 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-2068: A flaw was found in OpenSSL. The issue in CVE-2022-1292 did not find other places in the `c_rehash` script where it possibly passed the file names of certi…
first Jul 28, 2022 -
Medium max 9.8ALAS2-2022-1831 1 CVE
Moderate: openssl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-2068: A flaw was found in OpenSSL. The issue in CVE-2022-1292 did not find other places in the `c_rehash` script where it possibly passed the file names of certi…
first Jul 28, 2022 -
Medium max 7.8ALAS2-2022-1829 35 CVEs
Moderate: vim security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-2231: NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2. CVE-2022-2210: Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. CVE-2022-…
first Jul 19, 2022 -
Medium max 7.5ALAS2-2022-1826 1 CVE
Moderate: libxml2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-23308: valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
first Jul 19, 2022 -
Medium max 5.3ALAS2-2022-1821 12 CVEs
Moderate: java-1.8.0-openjdk security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-21365: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affecte…
first Jul 19, 2022 -
Medium max 7.8ALAS2-2022-1820 1 CVE
Moderate: git security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-29187: A vulnerability was found in Git. This flaw occurs due to Git not checking the ownership of directories in a local multi-user system when running commands…
first Jul 19, 2022 -
MediumALAS2-2022-1819 3 CVEs
Moderate: 389-ds-base security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-0996: A vulnerability was found in the 389 Directory Server. This issue allows expired passwords to access the database, causing improper authentication. CVE-202…
first Jul 19, 2022 -
MediumALAS2-2022-1816 5 CVEs
Moderate: rust security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-31162: In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics. CVE-2021-28879: In th…
first Jul 6, 2022 -
Medium max 9.8ALAS2-2022-1815 1 CVE
Moderate: openssl11 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-1292: The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a…
first Jul 6, 2022 -
Medium max 9.1ALAS2-2022-1812 8 CVEs
Moderate: httpd security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-31813: A flaw was found in the mod_proxy module of httpd. The server may remove the X-Forwarded-* headers from a request based on the client-side Connection head…
first Jul 6, 2022 -
Medium max 6.0ALAS2-2022-1810 1 CVE
Moderate: git security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-24765: A vulnerability was found in Git. This flaw occurs due to Git not checking the ownership of directories in a local multi-user system when running commands…
first Jul 6, 2022 -
Medium max 9.8ALAS2-2022-1809 7 CVEs
Moderate: expat security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-22827: storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. CVE-2022-22826: nextScaffoldPart in xmlparse.c in Expat (aka libexpa…
first Jul 6, 2022 -
Medium max 7.5ALAS2-2022-1808 1 CVE
Moderate: curl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-27782: A vulnerability was found in curl. This issue occurs because curl can reuse a previously created connection even when a TLS or SSH-related option is chang…
first Jul 6, 2022 -
MediumALAS2-2022-1807 1 CVE
Moderate: amazon-ssm-agent security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-24675: A buffer overflow flaw was found in Golang's library encoding/pem. This flaw allows an attacker to use a large PEM input (more than 5 MB) ), causing a sta…
first Jul 6, 2022 -
Medium max 7.3ALAS2-2022-1817 1 CVE
Moderate: rust security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-21658: A race condition flaw was found in Rust's std::fs::remove_dir_all function. Rust applications that use this function may be vulnerable to a race condition…
first Jul 6, 2022 -
Medium max 6.5ALAS2-2020-1497 74 CVEs
Moderate: ImageMagick security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-25664: A flaw was found in ImageMagick. A specially crafted image could cause an out-of-bounds memory write leading to a crash. The highest threat from this vuln…
first Oct 22, 2020 -
Medium max 7.5ALAS2-2022-1802 6 CVEs
Moderate: python security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-0391: A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. Th…
first May 31, 2022 -
Medium max 9.8ALAS2-2022-1801 1 CVE
Moderate: openssl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-1292: The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a…
first May 31, 2022