2,033 results · Clear filters · Feed
-
Medium max 5.9ALAS2-2018-1120 3 CVEs
Moderate: gnutls security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-10846: A cache-based side channel attack was found in the way GnuTLS implements CBC-mode cipher suites. An attacker could use a combination of "Just in Time…
first Dec 6, 2018 -
Medium max 7.5ALAS2-2018-1106 1 CVE
Moderate: 389-ds-base security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-14648: It was found that a specially crafted search query could lead to excessive CPU consumption in the do_search() function. An unauthenticated attacker could …
first Nov 13, 2018 -
MediumALAS2-2018-1104 1 CVE
Moderate: mod_http2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-11763: In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without …
first Nov 7, 2018 -
MediumALAS2-2018-1102 4 CVEs
Moderate: openssl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-0739: Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive …
first Nov 7, 2018 -
MediumALAS2-2018-1096 1 CVE
Moderate: flatpak security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-6560: It was found that flatpak's D-Bus proxy did not properly filter the access to D-Bus during the authentication protocol. A specially crafted flatpak ap…
first Oct 24, 2018 -
MediumALAS2-2018-1095 1 CVE
Moderate: nss security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-12384: A flaw was found in the way NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. A man-in-the-middle attacker …
first Oct 24, 2018 -
Medium max 7.5ALAS2-2018-1094 4 CVEs
Moderate: 389-ds-base security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-14638: A double-free of a password policy structure was found in the way slapd was handling certain errors during persistent search. A unauthenticated attacker c…
first Oct 24, 2018 -
MediumALAS2-2018-1089 2 CVEs
Moderate: zsh security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-13259: It was discovered that zsh does not properly validate the shebang of input files and it truncates it to the first 64 bytes. A local attacker may use this …
first Oct 8, 2018 -
MediumALAS2-2018-1078 21 CVEs
Moderate: mariadb security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-2819: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and p…
first Sep 12, 2018 -
MediumALAS2-2018-1064 1 CVE
Moderate: java-1.7.0-openjdk security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-2952: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are J…
-
MediumALAS2-2018-1062 1 CVE
Moderate: httpd security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-8011: By specially crafting HTTP requests, the mod_md challenge handler would dereference a NULL pointer and cause the child process to segfault. This could be u…
-
MediumALAS2-2018-1054 1 CVE
Moderate: java-1.8.0-openjdk security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-2952: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are J…
first Aug 8, 2018 -
MediumALAS2-2018-1052 1 CVE
Moderate: curl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-0500: A heap-based buffer overflow has been found in the Curl_smtp_escape_eob() function of curl. An attacker could exploit this by convincing a user to use curl…
first Aug 8, 2018 -
MediumALAS2-2018-1048 4 CVEs
Moderate: glibc security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-11236: stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, c…
first Jul 24, 2018 -
MediumALAS2-2018-1044 1 CVE
Moderate: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-12232: A NULL pointer dereference issue was found in the Linux kernel. If the close() and fchownat() system calls share a socket file descriptor as an argument, …
first Jun 27, 2018 -
MediumALAS2-2018-964 1 CVE
Moderate: memcached security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-1000115: It was discovered that the memcached connections using UDP transport protocol can be abused for efficient traffic amplification distributed denial of se…
first Mar 8, 2018 -
MediumALAS2-2018-1022 1 CVE
Moderate: ghostscript security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-10194: The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in te…
first May 24, 2018 -
Medium max 7.5ALAS2-2018-1020 1 CVE
Moderate: nghttp2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-1000168: nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can resu…
first May 24, 2018 -
MediumALAS2-2018-1013 3 CVEs
Moderate: zsh security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-1100: A buffer overflow flaw was found in the zsh shell check path functionality. A local, unprivileged user can create a specially crafted message file, which, …
-
MediumALAS2-2018-1012 1 CVE
Moderate: libvncserver security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-7225: An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access …
-
MediumALAS2-2018-1011 3 CVEs
Moderate: golang security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-6574: An arbitrary command execution flaw was found in the way Go's "go get" command handled gcc and clang sensitive options during the build. A r…
-
Medium max 6.5ALAS2-2018-1010 2 CVEs
Moderate: krb5 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-7562: An authentication bypass flaw was found in the way krb5's certauth interface handled the validation of client certificates. A remote attacker able to …
-
MediumALAS2-2018-1009 8 CVEs
Moderate: ntp security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-6464: A vulnerability was discovered in the NTP server's parsing of configuration directives. A remote, authenticated attacker could cause ntpd to crash by …
-
MediumALAS2-2018-1006 1 CVE
Moderate: PackageKit security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-1106: An authentication bypass flaw has been found in PackageKit that allows users without administrator privileges to install signed packages. A local attacker …
-
MediumALAS2-2018-1004 4 CVEs
Moderate: openssl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-0737: OpenSSL RSA key generation was found to be vulnerable to cache side-channel attacks. An attacker with sufficient access to mount cache timing attacks durin…
-
MediumALAS2-2018-996 0 CVEs
Moderate: stunnel security update (Amazon Linux 2)
first Apr 19, 2018 -
Medium max 9.8ALAS2-2018-995 3 CVEs
Moderate: curl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-1000122: A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service…
-
MediumALAS2-2018-992 2 CVEs
Moderate: glibc security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-6551: The malloc implementation in the GNU C Library (aka glibc or libc6), from version 2.24 to 2.26 on powerpc, and only in version 2.26 on i386, did not proper…
-
MediumALAS2-2018-987 1 CVE
Moderate: mod_wsgi security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2014-8583: mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, which might allow…
-
MediumALAS2-2018-985 1 CVE
Moderate: mailman security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-5950: A cross-site scripting (XSS) flaw was found in mailman. An attacker, able to trick the user into visiting a specific URL, can execute arbitrary web scripts…
-
Medium max 5.3ALAS2-2018-963 1 CVE
Moderate: dhcp security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-3144: It was found that the DHCP daemon did not properly clean up closed OMAPI connections in certain cases. A remote attacker able to connect to the OMAPI port …
first Feb 20, 2018 -
MediumALAS2-2018-961 1 CVE
Moderate: systemd security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-1049: A race condition was found in systemd. This could result in automount requests not being serviced and processes using them could hang, causing denial of se…
first Feb 20, 2018 -
MediumALAS2-2018-960 1 CVE
Moderate: nautilus security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-14604: An untrusted .desktop file with executable permission set could choose its displayed name and icon, and execute commands without warning when opened by th…
first Feb 20, 2018